mirror of
https://github.com/MeshCore-Beacon/beacon-server.git
synced 2026-10-19 14:10:15 +00:00
MrAlders0n
1f83df8583
* docs: keep only server-specific contributor notes * docs: trim README to the code and link to beacon-docs * chore: strip tracking parameters from two airport website URLs
22 lines
823 B
Markdown
22 lines
823 B
Markdown
# Security Policy
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please do not report security vulnerabilities through public GitHub issues.
|
|
|
|
Instead, contact the maintainers directly via the MeshCore Canada Discord
|
|
server: [MeshCore Canada Discord](https://discord.gg/Gz3KvJx2hf); reach out to
|
|
**dedskelly** directly. Include as much detail as possible: the nature of the
|
|
issue, steps to reproduce, and any potential impact.
|
|
|
|
We will acknowledge receipt within 48 hours and aim to provide a fix or
|
|
mitigation within 14 days depending on severity.
|
|
|
|
Once a fix is released we will publish a security advisory on the repository.
|
|
|
|
## Scope
|
|
|
|
Beacon is intended for deployment on trusted internal networks behind a reverse
|
|
proxy. There is currently no authentication layer. Please bear this in mind when
|
|
assessing the severity of any findings.
|