From c55406657d40e12c37a2390bf4b44ae01a356c2a Mon Sep 17 00:00:00 2001 From: Tom Christie Date: Wed, 22 May 2013 16:45:33 +0100 Subject: [PATCH] Security email address --- README.md | 7 +++++++ docs/index.md | 9 ++++++++- 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 5d1631d49..94996c39d 100644 --- a/README.md +++ b/README.md @@ -102,6 +102,12 @@ For questions and support, use the [REST framework discussion group][group], or You may also want to [follow the author on Twitter][twitter]. +# Security + +If you believe you’ve found something in Django REST framework which has security implications, please **do not raise the issue in a public forum**. + +Send a description of the issue via email to [rest-framework-security@googlegroups.com][security-mail]. The project maintainers will then work with you to resolve any issues where required, prior to any public disclosure. + # License Copyright (c) 2011-2013, Tom Christie @@ -149,3 +155,4 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. [pyyaml]: http://pypi.python.org/pypi/PyYAML [defusedxml]: https://pypi.python.org/pypi/defusedxml [django-filter]: http://pypi.python.org/pypi/django-filter +[security-mail]: mailto:rest-framework-security@googlegroups.com diff --git a/docs/index.md b/docs/index.md index 7c38efd34..222bb7399 100644 --- a/docs/index.md +++ b/docs/index.md @@ -206,7 +206,13 @@ For updates on REST framework development, you may also want to follow [the auth Follow @_tomchristie - + +## Security + +If you believe you’ve found something in Django REST framework which has security implications, please **do not raise the issue in a public forum**. + +Send a description of the issue via email to [rest-framework-security@googlegroups.com][security-mail]. The project maintainers will then work with you to resolve any issues where required, prior to any public disclosure. + ## License Copyright (c) 2011-2013, Tom Christie @@ -294,6 +300,7 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. [stack-overflow]: http://stackoverflow.com/ [django-rest-framework-tag]: http://stackoverflow.com/questions/tagged/django-rest-framework [django-tag]: http://stackoverflow.com/questions/tagged/django +[security-mail]: mailto:rest-framework-security@googlegroups.com [paid-support]: http://dabapps.com/services/build/api-development/ [dabapps]: http://dabapps.com [contact-dabapps]: http://dabapps.com/contact/