search

w3c / IntersectionObserver

Intersection Observer
https://www.w3.org/TR/intersection-observer/
Other
3.62k stars 531 forks source link

Add Security Policy #514

Open gabibguti opened 10 months ago

gabibguti commented 10 months ago

Adding a Security Policy is important to provide guidance on how users can report potential vulnerabilities and communicate when vulnerabilities will be confirmed, fixed and disclosed to the public. When possible, vulnerabilities should be reported privately through and email or GitHub security advisories to avoid being exploited by attackers.

This is considered a good-practice and recommended by Github and Scorecard.

If you agree with this addition, I can support you by opening a PR with a Security Policy draft.

Additional Context

Hi! I'm Gabriela and I work on behalf of Google and the OpenSSF suggesting supply-chain security changes :)

joycebrum commented 7 months ago

Hi! I'm Joyce and I work along with Gabriela in Google’s Open Source Security Team!

Just friendly pinging and offering my help on answering any questions! Let me know if I can help with anything or whether a PR would be welcome.