meta: allow penetration testing on live system with prior authorization · nodejs/node@e98504e · GitHub

nodejs / node Public

• Notifications You must be signed in to change notification settings
• Fork 36.6k
• Star 120k

• Code
• Issues 632
• Pull requests 755
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Commit e98504e

Browse filesBrowse the repository at this point in the historyBrowse files

mcollina

authored and

aduh95

committed

meta: allow penetration testing on live system with prior authorization

Signed-off-by: Matteo Collina <hello@matteocollina.com> PR-URL: #57966 Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Paolo Insogna <paolo@cowtech.it> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Darshan Sen <raisinten@gmail.com> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Jordan Harband <ljharb@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Michael Dawson <midawson@redhat.com>

1 parent ca020fd commit e98504e
Copy full SHA for e98504e

1 file changed

+3-1Lines changed: 3 additions & 1 deletion

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• SECURITY.md

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎SECURITY.md‎

Copy file name to clipboardExpand all lines: SECURITY.md

+3-1Lines changed: 3 additions & 1 deletion

• Display the source diff
• Display the rich diff

Original file line number	Diff line number	Diff line change
@@ -72,7 +72,9 @@ When reporting security vulnerabilities, reporters must adhere to the following
72	72
73	73	3. **Responsible Testing**: When testing potential vulnerabilities:
74	74	* Use isolated, controlled environments.
75		- * Do not test on production systems.
	75	+ * Do not test on production systems without prior authorization. Contact
	76	+ the Node.js Technical Steering Committee (<tsc@iojs.org>) for permission or open
	77	+ a HackerOne report.
76	78	* Do not attempt to access or modify other users' data.
77	79	* Immediately stop testing if unauthorized access is gained accidentally.
78	80

0 commit comments

Comments

0 (0)