# Security Policy

## Supported Versions

Only the latest version of Limristem Web is currently supported.

| Version | Supported          |
| ------- | ------------------ |
| 1.x.x   | :white_check_mark: |
| < 1.0   | :x:                |

## Reporting a Vulnerability

We take security seriously. If you discover a vulnerability, please report it via GitHub Issues or contact the maintainer directly.

### Process

1.  **Do not** disclose the vulnerability publicly until it has been addressed.
2.  Provide detailed steps to reproduce the issue.
3.  We will review the report and aim to provide a fix or workaround as soon as possible.

## Security Features

Limristem Web includes several built-in security features:
*   **IP Banning**: Automatically bans IPs after multiple failed login attempts.
*   **SFTP Isolation**: Users are chrooted to their home directories.
*   **Input Sanitization**: Basic input validation is performed, but users should ensure they trust their inputs.
*   **Secure Password Storage**: Passwords are hashed using Werkzeug's security utilities (Scrypt).

## Disclaimer

This software is provided "as is", without warranty of any kind. Use it at your own risk.