Skip to content

Latest commit

 

History

History
44 lines (22 loc) · 2.55 KB

SECURITY.md

File metadata and controls

44 lines (22 loc) · 2.55 KB
Raw

安全政策

报告漏洞

我们非常重视安全和用户数据的保护。如果您发现该项目中存在潜在的安全漏洞或问题，我们诚挚邀请您积极参与漏洞报告，帮助我们改进和加强安全措施。

请您在发现漏洞后立即通过以下方式与我们联系：

  1. 发送电子邮件至security@naruse.io，描述您发现的漏洞细节。请尽可能提供具体信息，以便我们能够快速理解和复现该漏洞。

  2. 我们将在收到您的邮件后尽快回复，并与您进一步确认漏洞细节。

  3. 请您在漏洞报告中提供您的联系方式，以便我们在需要进一步沟通时能够与您取得联系。

  4. 我们承诺在您报告漏洞后，将尽快进行修复，确保用户的数据和信息安全。

  5. 如果您愿意，我们会在确认和修复漏洞后，向您致以感谢，并将您列入致谢名单中。

请注意，为了保护用户和系统的安全，我们不鼓励任何未经授权的安全测试或攻击行为。如果您在测试过程中发现任何异常或意外情况，请立即停止并报告给我们。

感谢您参与我们的安全工作，共同构建更安全的环境！

Security Policy

Reporting a Vulnerability

We take security and user data protection very seriously. If you discover a potential security vulnerability or issue in the project, we sincerely invite you to participate in responsible disclosure and help us improve and strengthen our security measures.

Please follow the steps below to report a vulnerability:

  1. Send an email to security@naruse.io, describing the details of the vulnerability you have discovered. Please provide as much specific information as possible to help us understand and reproduce the issue quickly.

  2. We will respond as soon as we receive your email and work with you to verify the vulnerability.

  3. Please provide your contact information in the vulnerability report so that we can reach out to you if further communication is necessary.

  4. We commit to promptly fix for the vulnerability after it has been confirmed.

  5. If you agree, we will acknowledge your contribution and include you in the list of acknowledgments after confirming and addressing the reported vulnerability.

Please note that we do not encourage any unauthorized security testing or attacks that could harm users or systems. If you encounter any abnormal or unexpected behavior during your testing, please immediately stop and report it to us.

Thank you for contributing to our security efforts and helping us build a safer environment together!