mirror of
https://github.com/Tivix/django-rest-auth.git
synced 2024-12-02 13:53:43 +03:00
Adds vulnerability disclosure
This commit is contained in:
parent
dfec75ed94
commit
202b5e8d4d
17
docs/disclosure.rst
Normal file
17
docs/disclosure.rst
Normal file
|
@ -0,0 +1,17 @@
|
||||||
|
Vulnerability Disclosure
|
||||||
|
========================
|
||||||
|
|
||||||
|
Attn: Developers and Security Researchers.
|
||||||
|
|
||||||
|
Please observe the standard best practices of responsible disclosure, especially considering that this is OSS.
|
||||||
|
See OWASP's disclosure `cheat sheet <https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html#methods-of-disclosure>`_.
|
||||||
|
|
||||||
|
Some basic rules:
|
||||||
|
|
||||||
|
- Keep it legal.
|
||||||
|
- Respect everyone's privacy.
|
||||||
|
- Contact the core maintainer(s) immediately if you discover a security vulnerability (imichael@pm.me for now).
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -26,3 +26,4 @@ Contents
|
||||||
Demo project <demo>
|
Demo project <demo>
|
||||||
FAQ <faq>
|
FAQ <faq>
|
||||||
Changelog <changelog>
|
Changelog <changelog>
|
||||||
|
Security Disclosure <disclosure>
|
||||||
|
|
Loading…
Reference in New Issue
Block a user