Document how to report vulnerability

This commit is contained in:
Tatsuhiro Tsujikawa 2016-08-21 12:18:31 +09:00
parent 874ef1ac54
commit 6ae58cc22e
1 changed files with 11 additions and 0 deletions

View File

@ -1500,6 +1500,17 @@ See `Contribution Guidelines
<https://nghttp2.org/documentation/contribute.html>`_ for more <https://nghttp2.org/documentation/contribute.html>`_ for more
details. details.
Reporting vulnerability
-----------------------
If you find a vulnerability in our software, please send the email to
"tatsuhiro.t at gmail dot com" about its details instead of submitting
issues on github issue page. It is a standard practice not to
disclose vulnerability information publicly until a fixed version is
released, or mitigation is worked out.
In the future, we may setup a dedicated mail address for this purpose.
Release schedule Release schedule
---------------- ----------------