Skip to content

Latest commit

 

History

History
29 lines (15 loc) · 2.2 KB

SECURITY.md

File metadata and controls

29 lines (15 loc) · 2.2 KB
Raw

Security Policy

Reporting a Vulnerability

We take security seriously and value the contributions of security researchers to improve the security of our plugin. If you discover a security vulnerability in the Refinery plugin, please report it to the plugin developer immediately. You can contact the developer via Discord:

  • Discord Username: dezeeuw.rdt

When reporting a vulnerability, please provide detailed information about the issue, including steps to reproduce it if possible. The developer will respond promptly to security vulnerability reports and will work to address any issues in a timely manner.

Security Best Practices

To ensure the security of your Minecraft server and plugins, we recommend following these best practices:

  • Dependency Management: Always depend on the Refinery plugin when integrating it into your own plugins. This ensures that your plugin uses the latest version of Refinery, including any security fixes or updates.

  • Regular Updates: Keep your Minecraft server and all plugins up to date with the latest releases. Developers frequently release updates to address security vulnerabilities and improve overall stability.

  • Access Control: Limit access to administrative commands and features to trusted users only. Implementing proper access controls can help prevent unauthorized access to sensitive functionality.

  • Secure Configuration: Configure your server and plugins securely by following best practices for permissions, configuration files, and server settings. Avoid using default or insecure configurations that may expose your server to security risks.

  • Monitoring and Logging: Monitor your server logs for unusual activity and security events. Logging can help you detect and respond to potential security threats in a timely manner.

Responsible Disclosure

We encourage responsible disclosure of security vulnerabilities in the Refinery plugin. If you discover a vulnerability, please allow us a reasonable amount of time to investigate and address the issue before disclosing it publicly. We appreciate your cooperation in helping us maintain the security of our plugin and the Minecraft community.

Thank you for your help in keeping Minecraft servers secure!