A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# Canonical URI Canonical: https://yourls.org/.well-known/security.txt # Our security address Contact: mailto:yourls@yourls.org # Our OpenPGP key Encryption: openpgp4fpr:6fcd850e18e4a4ff76dd1184a3a42a61961e423f # Our security policy Policy: https://github.com/YOURLS/YOURLS/security/policy Expires: 2023-12-31T18:37:07z
This policy crawled by Onyphe on the 2024-04-01 is sorted as securitytxt.
FireBounty © 2015-2024