EldoUI runs inside World of Warcraft's addon sandbox. It cannot reach the internet or your files outside the game's own SavedVariables.

If you find something that could still harm players, such as an import string that runs unexpected code or a way to make EldoUI act without the player's click, please report it privately: Security → Report a vulnerability on this repository. Do not open a public issue for it.

You will get an answer as soon as possible, and the fix ships in the next release with credit, if you want it.

Only the newest release is supported. Please update before reporting.