mirror of
https://github.com/Lissy93/dashy.git
synced 2024-12-20 23:41:48 +03:00
30 lines
1.7 KiB
Markdown
30 lines
1.7 KiB
Markdown
|
|
||
|
|
Security is taken very seriously
|
||
|
|
|
||
|
|
## Supported Versions
|
||
|
|
The current versions, and previous minor versions and / or the past 5 versions are supported. Releases either older than 5 versions, or from the last major version are no longer maintained or monitored, and hence the security of which cannot be guaranteed.
|
||
|
|
|
||
|
|
## Keeping your Instance of Dashy Secure
|
||
|
|
See [Docs: Management - Security](/docs/management.md#securing)
|
||
|
|
|
||
|
|
## Reporting a Security Issue
|
||
|
|
If you think you've found a critical issue, please send an email to `security@mail.alicia.omg.lol`, to encrypt it, you can use [`0688 F8D3 4587 D954 E9E5 1FB8 FEDB 68F5 5C02 83A7`](https://keybase.io/aliciasykes/pgp_keys.asc?fingerprint=0688f8d34587d954e9e51fb8fedb68f55c0283a7). You should receive a response within 48 hours.
|
||
|
|
|
||
|
|
All non-critical issues can be raised as a ticket.
|
||
|
|
|
||
|
|
Please include the following information:
|
||
|
|
- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
|
||
|
|
- Full paths of source file(s) related to the manifestation of the issue
|
||
|
|
- The location of the affected source code (tag/branch/commit or direct URL)
|
||
|
|
- Any special configuration required to reproduce the issue
|
||
|
|
- Step-by-step instructions to reproduce the issue
|
||
|
|
- Proof-of-concept or exploit code (if possible)
|
||
|
|
- Impact of the issue, including how an attacker might exploit the issue
|
||
|
|
|
||
|
|
This info will help with finding and fixing the issue.
|
||
|
|
|
||
|
|
Please use only English.
|
||
|
|
|
||
|
|
## Issues That Should Not Be Raised
|
||
|
|
Please do not raise issues in this repo which relate to Vue or Vue CLI, we're already using the latest versions of these dependencies, so any issues here to be taken up with Vue. The same applies to other dev dependencies that are at the latest version.
|