mirror of
https://github.com/curl/curl.git
synced 2024-12-15 06:40:09 +08:00
2bc1d775f5
- they are mostly pointless in all major jurisdictions - many big corporations and projects already don't use them - saves us from pointless churn - git keeps history for us - the year range is kept in COPYING checksrc is updated to allow non-year using copyright statements Closes #10205
17 lines
442 B
Markdown
17 lines
442 B
Markdown
<!--
|
|
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
|
|
SPDX-License-Identifier: curl
|
|
-->
|
|
|
|
# Security Policy
|
|
|
|
See [SECURITY-PROCESS](docs/SECURITY-PROCESS.md) for full details.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
If you have found or just suspect a security problem somewhere in curl or
|
|
libcurl, report it on [HackerOne](https://hackerone.com/curl).
|
|
|
|
We treat security issues with confidentiality until controlled and disclosed responsibly.
|