defunctzombie / node-url

node.js core url module as a module
MIT License
375 stars 96 forks source link

Trying to get in touch with you regarding a security issue #56

Closed JamieSlome closed 3 years ago

JamieSlome commented 3 years ago

Hi there,

I couldn't find a SECURITY.md in your repository and so am not sure how to best contact you privately to disclose the security issue.

Can you add a SECURITY.md file with your e-mail to your repository, so that I know who to contact? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, please let me know so I can ping you the info.

Thanks! (cc @JamieSlome)

ljharb commented 3 years ago

Hi Jamie - you can email me directly (you already have my address).

I’ll be taking over maintenance of this package (see #53) and I’ll see how i can help.

JamieSlome commented 3 years ago

@ljharb - great to hear from you!

I just sent an e-mail over to you with more information.

Thanks! 🍰