Please report security vulnerabilities privately to zack.scholl+croc@gmail.com.

Patches are especially welcome, they help me implement your findings directly and ensure you receive credit. Thank you for helping keep this project secure!