Skip to content

SECURITY.md

Latest commit

 

History

History
34 lines (23 loc) · 1.11 KB

SECURITY.md

File metadata and controls

34 lines (23 loc) · 1.11 KB

Security Policy

Supported Versions

This repository hosts static learning projects. Only the main branch is considered supported.

Reporting a Vulnerability

If you discover a security issue — for example, a project in this repo that ships malicious code, leaks data via a third-party script, or attempts to phish visitors of the showcase page — please do not open a public issue.

Instead, report it privately:

  1. Open a private security advisory on this repository, or
  2. Contact the maintainer @cu-sanjay directly.

Please include:

  • The affected project folder (if applicable).
  • Steps to reproduce or a proof of concept.
  • The impact you believe it has.

You can expect an initial response within 72 hours. Once the report is validated, the offending content is removed and, where appropriate, the contributor is contacted.

Out of scope

  • Issues in third-party browsers or operating systems.
  • Reports generated by automated scanners with no demonstrated impact.
  • Self-XSS that requires the user to paste code into their own console.