This repository contains the source of the personal portfolio website https://leonkrix.dev. It is a static website without a backend, user accounts or stored user data.

Only the current state of the main branch (the live website) is supported.

Please do not open a public issue for security problems.

1. Preferred: use GitHub's private vulnerability reporting. Go to the Security tab of this repository and choose Report a vulnerability.
2. Alternatively, send an email to hello@leonkrix.dev with the subject Security.

Please include a description of the issue, the affected URL or file, and steps to reproduce it.

This is a personal project. I will acknowledge a report as soon as I can (usually within a few days) and fix confirmed issues on a best-effort basis. There is no bug bounty.

• Findings that require a compromised browser, device or account of the visitor
• Missing rate limiting, denial-of-service reports and automated scanner output without a demonstrated impact
• Social engineering and physical attacks