[wp-trac] [WordPress Trac] #57937: Sync the SECURITY.md file with our HackerOne policy

WordPress Trac noreply at wordpress.org
Thu Mar 16 21:31:02 UTC 2023


#57937: Sync the SECURITY.md file with our HackerOne policy
------------------------------+---------------------
 Reporter:  desrosj           |       Owner:  (none)
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  6.2.1
Component:  Security          |     Version:
 Severity:  normal            |  Resolution:
 Keywords:  has-patch commit  |     Focuses:
------------------------------+---------------------

Comment (by peterwilsoncc):

 To follow the KISS principle, it might be easier to link to H1 rather than
 attempt to maintain multiple sources of truth.

 I'd suggest:
 * supported versions
 * targets

 {{{
 ### Full policy

 The full security policy for WordPress, WordPress.org and other WordPress
 foundation products
 can be found on the [https://hackerone.com/wordpress](WordPress HackerOne
 program page).

 Security issues must be submitted via HackerOne and it recommended you
 read the full policy
 document before submitting your report.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57937#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list