wechat-radar/SECURITY.md

Security

Reporting

Please open a GitHub security advisory or a private issue if you find a vulnerability.

Local data

The most sensitive asset is your local SQLite database. Keep it outside synced folders and do not publish it. The default path is ~/.wechat-radar/radar.db.

Command execution

The app invokes wx via child_process.execFile with argument arrays. Avoid changing this to shell string execution.