sentora / sentora-core

Sentora is a web hosting control panel written in PHP for *NIX
GNU General Public License v3.0
648 stars 446 forks source link

Trying to get in touch regarding a security issue #357

Closed zidingz closed 3 years ago

zidingz commented 3 years ago

Hey there!

I'd like to report a security issue but cannot find contact instructions on your repository.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

TGates71 commented 3 years ago

Ok. I will check into adding the security. Md file. We do know there are some security issues and we have been working on them. You can safely report it here to me and I will forward it to the dev team. Thank you for testing and helping us continue continue Sentora.

On Sun, Aug 29, 2021, 1:00 PM Ziding Zhang @.***> wrote:

Hey there!

I'd like to report a security issue but cannot find contact instructions on your repository.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper https://github.com/huntr-helper)

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/sentora/sentora-core/issues/357, or unsubscribe https://github.com/notifications/unsubscribe-auth/AATP5W7GKWFGFDTY3EXH5ODT7JRRFANCNFSM5DANLQAQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

zidingz commented 3 years ago

Thanks! If it'll save you time: https://github.com/sentora/sentora-core/pull/358

TGates71 commented 3 years ago

Thanks!

On Tue, Aug 31, 2021, 5:24 AM Ziding Zhang @.***> wrote:

Closed #357 https://github.com/sentora/sentora-core/issues/357.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/sentora/sentora-core/issues/357#event-5231249917, or unsubscribe https://github.com/notifications/unsubscribe-auth/AATP5WZRXQ7LJQTOBWDNACLT7SNUHANCNFSM5DANLQAQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.