New page for security researcher

scratchfoundation / scratch-www

Standalone web client for Scratch

https://scratch.mit.edu

BSD 3-Clause "New" or "Revised" License

1.61k stars 850 forks source link

Open apple502j opened 4 years ago

apple502j commented 4 years ago

There should be a page for security researcher (like me) - that includes security advisories, disclosure guidelines and information.

Security advisories: if there are vulnerabilities discovered in Scratch products, they would be listed here.
Disclosure guidelines
How to join bug bounty
PGP public key
Special email for security issues
While not necessary, maybe credits for hackers?

jeffalo commented 4 years ago

adding on, could there also be a page that follows the security.txt format?