summaryrefslogtreecommitdiff
path: root/SECURITY.md
diff options
context:
space:
mode:
authorMoonchild <moonchild@palemoon.org>2022-04-27 00:14:54 +0000
committerMoonchild <moonchild@palemoon.org>2022-04-27 00:14:54 +0000
commit33523f5d5ed0c3b8000aae21a50a56c238422db3 (patch)
tree5b8f93d2477161f2e812981a17e79864083d7ff8 /SECURITY.md
parentc482078b09a8e7c777b6910d8e17eb20fd5c0a79 (diff)
downloaduxp-33523f5d5ed0c3b8000aae21a50a56c238422db3.tar.gz
No issue - Update README and SECURITY
- thereisonlyxul is no longer a thing. - minor wording update.
Diffstat (limited to 'SECURITY.md')
-rw-r--r--SECURITY.md5
1 files changed, 2 insertions, 3 deletions
diff --git a/SECURITY.md b/SECURITY.md
index 8ef8316746..8da448d59c 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -15,14 +15,14 @@ What should be considered vulnerabilities or security hazards by default:
Generally not security vulnerabilities:
- Null dereferencing crashes;
-- Malware extensions (but please do report those on the forum in the extensions board!);
+- Malware extensions (but please do report those on the forum in the add-ons board!);
- Denial-of-service (AKA "evil trap sites")
- Browser hangs
- Issues with non-standard manual configuration (either at build time or by manipulating about:config directly)
## Reporting a Vulnerability
-If you find an issue in UXP or the applications it builds on that could impact the security or safety of users please **do not**
+If you find an issue in UXP, or the applications building on it, that could impact the security or safety of users please **do not**
make an issue on Gitea about it. Gitea does not support restricted viewability for security sensitive bugs.
If you want to report a security-sensitive issue then please go to the [forum](https://forum.palemoon.org) and report the issue
@@ -33,4 +33,3 @@ except the recipient (not even moderators!).
You will be informed via private message if the vulnerability report is accepted or declined, with reasoning.
Security updates occur regularly and are given priority over most other development tasks. In general, they can be solved
relatively quickly and will be included in the next point release (third digit if not rolled into a more major one).
-