We actively support the latest version of cURL Converter:

All cURL parsing and code generation happens entirely in your browser. We:

• ✅ Never send your cURL commands to our servers
• ✅ Never store your data anywhere
• ✅ Never track individual requests or conversions
• ✅ Use local JavaScript execution only

• No cookies beyond essential functionality
• No third-party analytics (unless explicitly configured)
• No user accounts or authentication required
• No personal data collection

• All external links use rel="noopener noreferrer"
• Content Security Policy headers configured
• HTTPS-only in production
• No inline scripts in production build

We take security seriously. If you discover a security vulnerability, please:

1. Email us directly at: security@requestbin.net
2. Provide details:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)
3. Give us time to respond (48-72 hours)
4. Wait for confirmation before public disclosure

• Don't open a public GitHub issue for security vulnerabilities
• Don't share details publicly before we've addressed it
• Don't exploit the vulnerability beyond proof-of-concept testing

We appreciate security researchers who help us keep our users safe. With your permission, we'll:

• Credit you in our changelog
• Mention you in the fix commit
• Add you to our security acknowledgments

If you're self-hosting or forking this project:

• Never commit .env files
• Use .env.example as template
• Rotate secrets regularly

# Check for vulnerabilities
npm audit

# Fix vulnerabilities
npm audit fix

# Update dependencies
npm update

• Use official Node.js versions only
• Verify package integrity with lock files
• Enable Dependabot alerts (GitHub)

• Use HTTPS only (no HTTP)
• Configure security headers:
  • X-Content-Type-Options: nosniff
  • X-Frame-Options: DENY
  • Content-Security-Policy
  • Strict-Transport-Security
• Keep deployment platform updated

• OWASP Top 10
• Node.js Security Best Practices
• Astro Security

For security-related inquiries:

• Email: security@requestbin.net
• PGP Key: [Link to public key if available]

For general questions, use GitHub Discussions.

Last Updated: November 29, 2025