Please report security issues privately by opening a GitHub security advisory when available.

Do not include secrets, private browser profiles, production cookies, or sensitive headers in issues or benchmark reports.

Lightwright launches real browsers and can access local or authenticated web apps. Treat scripts, fixtures, and benchmark URLs as code execution surfaces.