We actively support the following versions of LP with security updates:

We take security vulnerabilities seriously. If you discover a security vulnerability in LP, please report it responsibly.

Preferred Method: Use GitHub's private vulnerability reporting feature.

1. Go to the Security Advisory page
2. Click "Report a vulnerability"
3. Fill in the details

Alternative: Email the maintainer directly if the vulnerability is sensitive.

Please include the following information:

• Description of the vulnerability
• Steps to reproduce the issue
• Affected versions
• Potential impact
• Suggested fix (if any)
• Your contact information for follow-up

LP provides built-in security features through the @security decorator:

# Rate limiting
@security(rate_limit=100)
def api_endpoint():
    pass

# Authentication required
@security(auth=True, level=3)
def protected_function():
    pass

# Input validation & sanitization
@security(validate=True, sanitize=True, prevent_injection=True)
def process_input(data: str) -> str:
    return data

# Access control
@security(admin=True)
def admin_function():
    pass

# Read-only mode
@security(readonly=True)
def read_data():
    pass

When using LP, follow these security best practices:

@security(validate=True)
def process_user_input(data: dict) -> dict:
    # Input is automatically validated
    return data

@security(prevent_injection=True)
def query_database(user_input: str) -> list:
    # SQL injection is automatically detected and blocked
    return sqlite.query(db, f"SELECT * FROM users WHERE name = '{user_input}'")

@security(prevent_xss=True, sanitize=True)
def render_html(content: str) -> str:
    # HTML is automatically sanitized
    return content

@security(rate_limit=60)  # 60 requests per minute
def public_api():
    pass

For security concerns, contact:

• GitHub Security Advisories: Report a vulnerability
• Project Maintainer: @huyhapitk12

We thank all security researchers who responsibly disclose vulnerabilities. Contributors who report valid security issues will be acknowledged in our security advisories (with their permission).