Repository policy

Security

How should a vulnerability be reported?

Send vulnerability details to contact@subwaysurfersmodgame.com before opening a public issue when disclosure would expose visitors to harm.

• Name the affected file and function.
• Record the browser and operating system.
• Provide exact reproduction steps.
• Describe the observed and expected results.
• Use a minimal proof of concept containing no private APK or personal data.

What are the calculator’s security boundaries?

The calculator reads a local file and returns a SHA-256 digest. The calculator does not parse, install, execute, upload, or classify the selected file. A checksum match confirms byte equality against a reference checksum; it does not establish file safety.