Adds vulnerability disclosure

This commit is contained in:
Michael 2020-05-30 01:16:02 -05:00
parent dfec75ed94
commit 202b5e8d4d
2 changed files with 18 additions and 0 deletions

17
docs/disclosure.rst Normal file
View File

@ -0,0 +1,17 @@
Vulnerability Disclosure
========================
Attn: Developers and Security Researchers.
Please observe the standard best practices of responsible disclosure, especially considering that this is OSS.
See OWASP's disclosure `cheat sheet <https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html#methods-of-disclosure>`_.
Some basic rules:
- Keep it legal.
- Respect everyone's privacy.
- Contact the core maintainer(s) immediately if you discover a security vulnerability (imichael@pm.me for now).

View File

@ -26,3 +26,4 @@ Contents
Demo project <demo> Demo project <demo>
FAQ <faq> FAQ <faq>
Changelog <changelog> Changelog <changelog>
Security Disclosure <disclosure>