Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create SECURITY.md #5214

Merged
merged 2 commits into from
Apr 24, 2020
Merged

Create SECURITY.md #5214

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e7ef667
Create SECURITY.md
benmcgarry Apr 24, 2020
72ec69f
Update SECURITY.md
benmcgarry Apr 24, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
# Security Policy

This is the security/disclosure policy for Reddit Enhancement Suite, it covers all repositories that are related to the core project. We appreciate all disclosures related to the project.

As we are a community developed project, we are unable to offer rewards for disclosures.

## Supported Versions

We support the latest version of RES on all supported browsers. Please see below for a complete list.

| Browser | Supported |
| ------- | ------------------ |
| Google Chrome | :white_check_mark: |
| Mozilla Firefox | :white_check_mark: |
| Mozilla Firefox ESR 78 | :white_check_mark: |
| Mozilla Firefox ESR 68 | :grey_question:* |
| Microsoft Edge | :x: |
| Microsoft Edge Chromium | :white_check_mark: |
| Safari | :x: |

Mozilla Firefox ESR 68: We will backport depending on the impact of the vulnerability.

## Reporting a Vulnerability

In order to report a vulnerability, please send an initial email to: ben@redditenhancementsuite.com and we will respond confirming the report. A public PGP key will be provided for future communications. Please provide as much detail as possible for initial triage, if you would rather report under the PGP key please let us know on the email above.

We will aim to respond in 24 hours, if you do not get a response in this timeframe place raise a GitHub issue stating you are having problems contacting us.