Update SECURITY.md

This commit is contained in:
Matt Holt 2020-05-20 14:24:47 -06:00 committed by GitHub
parent 2a8a198568
commit 452d4726f7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

2
.github/SECURITY.md vendored
View file

@ -16,7 +16,7 @@ Please note that we consider publicly-registered domain names to be public infor
## Reporting a Vulnerability ## Reporting a Vulnerability
Please email Matt Holt (the author) directly: Matthew dot Holt at Gmail. Please email Matt Holt (the author) directly: matt [at] lightcodelabs [dot com].
We'll need enough information to verify the bug and make a patch. It will speed things up if you suggest a working patch, such as a code diff, and explain why and how it works. Reports that are not actionable, do not contain enough information, are too pushy/demanding, or are not able to convince us that it is a viable and practical attack on the web server itself may be deferred to a later time or possibly ignored, resources permitting. Priority will be given to credible, responsible reports that are constructive, specific, and actionable. Thank you for understanding. We'll need enough information to verify the bug and make a patch. It will speed things up if you suggest a working patch, such as a code diff, and explain why and how it works. Reports that are not actionable, do not contain enough information, are too pushy/demanding, or are not able to convince us that it is a viable and practical attack on the web server itself may be deferred to a later time or possibly ignored, resources permitting. Priority will be given to credible, responsible reports that are constructive, specific, and actionable. Thank you for understanding.