Create SECURITY.md

closes #36
This commit is contained in:
Ave 2019-06-12 23:05:47 +00:00 committed by GitHub
parent 6007959119
commit 8a242956ac
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

22
SECURITY.md Normal file
View file

@ -0,0 +1,22 @@
# Security Policy
PRs to this file to improve wording are welcome.
Please do not try to exploit public instances if it's going to cause harm, instead, set up your own instance of robocop-ng.
Breaking "database" files, running arbitrary code, using an unprivileged uesr to do something user can't normally do (editing channels or guild, deleting others' messages, making bot do an @e or @h mention, reading channels that user can't read, writing to channels user can't write to etc) are all considered harmful.
## Supported Versions
Use this section to tell people about which versions of your project are
currently being supported with security updates.
| Version | Supported |
| ------------ | ------------------ |
| Latest git | :white_check_mark: |
## Reporting a Vulnerability
If the vulnerability fits into the "harmful" category specified above, then please email arcab [at] ave [dot] zone with details, as creating a public issue may cause it to be abused on public instances.
If not, please open an issue.