mirror of
https://github.com/EstrellaXD/Auto_Bangumi.git
synced 2026-02-02 17:59:27 +08:00
Add security policy with bilingual instructions (English/Chinese) for reporting vulnerabilities via GitHub Private Vulnerability Reporting or email contact. Closes #879 Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>
1.8 KiB
1.8 KiB
Security Policy / 安全政策
Supported Versions / 支持的版本
| Version | Supported |
|---|---|
| 3.x | ✅ |
| < 3.0 | ❌ |
Reporting a Vulnerability / 报告漏洞
English
If you discover a security vulnerability in AutoBangumi, please report it responsibly:
-
GitHub Private Vulnerability Reporting (Recommended): Use GitHub's private vulnerability reporting feature to submit your report securely.
-
Email: Contact the maintainer directly at the email associated with the GitHub account @EstrellaXD.
Please do NOT:
- Open a public GitHub issue for security vulnerabilities
- Disclose the vulnerability publicly before it has been addressed
What to include in your report:
- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- Any suggested fixes (optional)
We will acknowledge receipt of your report within 48 hours and work to address the issue promptly.
中文
如果您在 AutoBangumi 中发现安全漏洞,请通过以下方式负责任地报告:
-
GitHub 私密漏洞报告(推荐):使用 GitHub 的私密漏洞报告功能 安全地提交您的报告。
-
邮件:直接联系维护者,使用 GitHub 账户 @EstrellaXD 关联的邮箱。
请勿:
- 在公开的 GitHub Issue 中报告安全漏洞
- 在漏洞被修复之前公开披露
报告中请包含:
- 漏洞描述
- 复现步骤
- 潜在影响
- 修复建议(可选)
我们将在 48 小时内确认收到您的报告,并尽快处理该问题。