Please do not publicly disclose potential security vulnerabilities. Instead, report them to checkout@bluefinchcommerce.com, including "Security Vulnerability" and the name of this repo in the email subject. Informing us this way will allow us to quickly determine the severity of the problem and provide a fix without putting existing projects at risk.
If you would like to provide a patch, please do not open a pull request. Instead, create a commit on your fork of this repo and run this command:
git format-patch HEAD~1..HEAD --stdout > patch.txtIt will generate a file called patch.txt. Please email a description of the patch along with the patch itself to our email address mentioned above.