Skip to content

Latest commit

 

History

History
22 lines (16 loc) · 684 Bytes

SECURITY.md

File metadata and controls

22 lines (16 loc) · 684 Bytes

Security Policy

What to do

  • Clone the main branch from the repository
  • Set up a local envirnoment, see requirements and setup
  • Attack and exploit your own local autorender instance
  • Report the vulnerability via GitHub here

What NOT to do

  • Do NOT attack the production system (autorender.portal2.sr)
  • Do NOT publish your report before the deadlines, see below
  • Do NOT report useless attack surfaces like
    • Social engineering
    • Denial of service
    • Flaws in older devices or browsers

Deadlines

  • First response: 14 days
  • Patchfix: 90 days