Licensed under the GPLv3 (or later) LICENSE.
If you believe you have found a security vulnerability in any part of our code, please do not post it publicly by using our wikis or a public Phabricator task for that; rather, please read our security page carefully, and follow the instructions to create a private one.
As a quick overview, you can email security concerns to security@miraheze.org which will open a phabricator task that is hidden from public view. If you'd like, you can instead directly create a security-related task here, but please leave the "Security" project on the issue.