From 785f12ebe65c1149aa83ffc2cfd347a3bf14e77d Mon Sep 17 00:00:00 2001 From: Agate Date: Tue, 4 Aug 2020 11:14:52 +0200 Subject: [PATCH] Fix #313: document how to report security issues and vulnerabilities --- README.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.rst b/README.rst index 12fe29175..266724242 100644 --- a/README.rst +++ b/README.rst @@ -28,6 +28,16 @@ Contribute Contribution guidelines as well as development installation instructions are outlined in `CONTRIBUTING `_. +Security issues and vulnerabilities +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +If you found a vulnerability in Funkwhale, please report it on our Gitlab instance at `https://dev.funkwhale.audio/funkwhale/funkwhale/-/issues`_, ensuring +you have checked the ``This issue is confidential and should only be visible to team members with at least Reporter access. +`` box. + +This will ensure only maintainers and developpers have access to the vulnerability. Thank you for your help! + + Translate ^^^^^^^^^