Please report security issues privately to either project maintainer through their GitHub profile. Do not include credentials, private terrain data, or sensitive infrastructure locations in a public issue.

OpenFloodLab runs simulation code in the browser and does not require a backend service. Deployments are responsible for their own hosting, headers, and tile provider credentials.