GoGoGo/SECURITY.md
2022-06-22 13:27:26 +08:00

58 lines
2.2 KiB
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 安全策略 / Security Policy
## 支持的版本 / Supported Versions
如果您当前正在使用一个不受支持的版本,请先升级到一个受支持的新版本。新版本可能已经修复了您发现的安全问题!
If you are using an old unsupported version, please update to an new supported version. Maybe the new version has fixed the vulnerability!
| Version | Supported |
| ------- | ------------------ |
| 1.10.x | :white_check_mark: |
| < 1.10 | :x: |
## 报告漏洞 / Reporting a Vulnerability
团队和社区非常重视影梭中的安全问题感谢您为负责任地披露您的发现所做的努力
The team and community take security issues in GoGoGo seriously. We appreciate your efforts to responsibly disclose your findings.
如果您发现了任何安全漏洞请给 zcsexp@gmail.com 发送邮件邮件标题为 `[SECURITY][影梭] xxxxx`, 内容格式如下所示
To report a security issue, email to zcsexp@gmail.com. The mail title should be `[SECURITY][GoGoGo] xxxxx` and content are as below:
```
### 漏洞描述 / Vulnerability description
<!-- 请在上方详细地描述漏洞,然后删除该注释。 -->
<!-- Please describe the vulnerability in detail above, then delete this comment. -->
### 版本信息 / Version Info
- 影梭版本 / GoGoGo Version :
- 系统版本 / OS Version :
<!-- 请在上方描述出问题的影梭版本及使用的系统版本,然后删除该注释。 -->
<!-- Please describe version of GoGoGo and used OS above, then delete this comment. -->
### 复现步骤 / Steps to Reproduce
1.
2.
<!-- 请在上方描述如何复现该问题,然后删除该注释。 -->
<!-- Please describe how to reproduce the bug, then delete this comment. -->
### 如何修复 / How to fix
<!-- 如果您有对应的修复方法,请在上方描述你的方法,然后删除该注释。欢迎直接提交一个 PR。 -->
<!-- If you know how to fix, please describe your method above, then delete this comment. Welcome to submit a PR. -->
```
我们将努力尽快做出回复感谢您的贡献
We'll endeavor to respond quickly. Thanks for your contribution.