yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-08-11 18:27:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4446 from strapi/add/securityInfo

Browse Source 
Add security and vulnerability reporting page
This commit is contained in:
Jim LAURIE 2019-11-04 23:37:02 +01:00 committed by GitHub
commit 5bca7724c8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 47 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
.github/ISSUE_TEMPLATE/SECURITY.md vendored Normal file
View File

@ -0,0 +1,26 @@
---
name: 🛡 Security
about: Information on reporting security vulnerabilities
---
# Security Policy
## Supported Versions
As of November 2019 (and until this document is updated), only the v3.0.0-beta tags of Strapi are supported for updates. Any previous versions are currently not supported and users are advised to use them "at their own risk".
## Reporting a Vulnerability
Please report (suspected) security vulnerabilities to
**[security@strapi.io](mailto:security@strapi.io)** or via the [Strapi Slack](https://slack.strapi.io).
When reporting a (suspected) security vulnerabilitie via slack please reach out to any of the following Strapi employees directly:
- `@aureliengeorget`
- `@alexandre`
- `@lauriejim`
- `@soupette`
You will receive a response from us within 72 hours. If the issue is confirmed,
we will release a patch as soon as possible depending on complexity
but historically within a few days.

21
docs/SECURITY.md Normal file
View File

@ -0,0 +1,21 @@
# Security Policy
## Supported Versions
As of November 2019 (and until this document is updated), only the v3.0.0-beta tags of Strapi are supported for updates. Any previous versions are currently not supported and users are advised to use them "at their own risk".
## Reporting a Vulnerability
Please report (suspected) security vulnerabilities to
**[security@strapi.io](mailto:security@strapi.io)** or via the [Strapi Slack](https://slack.strapi.io).
When reporting a (suspected) security vulnerabilitie via slack please reach out to any of the following Strapi employees directly:
- `@aureliengeorget`
- `@alexandre`
- `@lauriejim`
- `@soupette`
You will receive a response from us within 72 hours. If the issue is confirmed,
we will release a patch as soon as possible depending on complexity
but historically within a few days.