The Internal Revenue Service is committed to ensuring the security and privacy of the American public. The applications in this repository are client-side only, are accessed in an unauthenticated manner, and do not store Personally Identifiable Information (PII) or Federal Tax Information (FTI). As a result, there is no bug bounty program associated with this repository.

However, we still value the integrity of our applications and want security researchers to feel comfortable reporting any vulnerabilities they discover so we can address them and keep our users safe. We developed our disclosure policy to reflect our values and uphold our sense of responsibility to security researchers who share their expertise with us in good faith.

Submit a vulnerability: Vulnerability reports for Form Builder Examples should be submitted by opening a new GitHub issue directly within this open-source repository.

Sensitive PII and SBU is not permitted anywhere in open source repositories.

Any accidental exposure of SBU or PII must be immediately reported and remediated as an incident.