diff --git a/.github/SECURITY.md b/.github/SECURITY.md index e9f016c4..ba681716 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -16,7 +16,7 @@ Please note that we consider publicly-registered domain names to be public infor ## Reporting a Vulnerability -Please email Matt Holt (the author) directly: Matthew dot Holt at Gmail. +Please email Matt Holt (the author) directly: matt [at] lightcodelabs [dot com]. We'll need enough information to verify the bug and make a patch. It will speed things up if you suggest a working patch, such as a code diff, and explain why and how it works. Reports that are not actionable, do not contain enough information, are too pushy/demanding, or are not able to convince us that it is a viable and practical attack on the web server itself may be deferred to a later time or possibly ignored, resources permitting. Priority will be given to credible, responsible reports that are constructive, specific, and actionable. Thank you for understanding.