If you think that you have found a security issue in "Toofff / Dragula", don't use the bug tracker and don't publish it publicly. Instead, all security issues must be sent to toofff.development+security@gmail.com.
PLEASE DO NOT PUBLISH SECURITY REPORTS PUBLICLY.