Merge remote-tracking branch 'upstream/pull/3647'

This commit is contained in:
Tom Hughes 2022-08-03 18:45:19 +01:00
commit 3971c54530

9
SECURITY.md Normal file
View file

@ -0,0 +1,9 @@
# Security Policy
## Reporting a Vulnerability
We welcome any reports of security vulnerabilities, and we will respond to you quickly to acknowledge receipt.
To report a vulnerability please email [the maintainers using this link](mailto:tom@compton.nu;openstreetmap-website@gravitystorm.co.uk;security@openstreetmap.org). This will also notify the security team for the main deployment of this software.
Please note that we do not offer any bug bounties and we do not participate in any bug programs. If your security report is validated by us, then we are happy to credit you publicly in our issue tracker, on request.