Update security process regarding who gets acknowledgement for finding vulnerabilities
还没有人认领这个 Issue。
评估
- 难度
- 1/5
- 预计耗时
- 1-3 小时
- 新手友好度
- 52/100
- Issue 类型
- 文档
- 描述清晰度
- 描述清楚
- 活跃度
- 停滞
调研方向
Start with the managing security issues page linked in the issue. Review the acknowledgement guidance and update it to cover agency or client reporters, Silverstripe staff reporting for a client, and third-party penetration testers. Done means both relevant parties are asked whether they want acknowledgement in each scenario.
由索引模型根据 Issue 内容生成。
描述
The [https://docs.silverstripe.org/en/5/contributing/managing_security_issues/](security issue/release process) mentions giving acknowledgement to the reporter - but in some scenarios the reporter isn't the correct person to acknowledge, necessarily.
Acceptance criteria
- Doc is updated to reflect these scenarios:
- The reporter is a digital agency or owner of a website who hired a third-party to perform a penetration test. The third party found a vulnerability.
- In this case the agency and third-party should both be asked if they want to be given acknowledgement
- The reporter is a staff member at Silverstripe, and they're reporting on behalf of a client who hired a third-party to perform a penetration test. The third party found a vulnerability.
- In this case the client and third-party should both be asked if they want to be given acknowledgement
- The reporter is a digital agency or owner of a website who hired a third-party to perform a penetration test. The third party found a vulnerability.
- 主要语言
- 没有语言数据
- 星标
- 7
- 派生
- 76
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
silverstripe/developer-docs 的其他 Issue
-
6.0.0 changelog: DBField formatters on array getters now render empty可能已有人在做 关联的 PR 仍在进行中或已合并。 未关闭
难度 1/5 1 小时以内 新手友好度 88/100
silverstripe/developer-docs#912 · 1 条评论 ·
-
难度 2/5 1-3 小时 新手友好度 82/100
silverstripe/developer-docs#911 ·
-
Read-only replicas: config key is rule_patterns_must_use_primary_db, not must_use_primary_db_rules未关闭affects/v6 complexity/low impact/low type/docs
难度 1/5 1 小时以内 新手友好度 92/100
silverstripe/developer-docs#909 · 1 条评论 ·
-
affects/v6 complexity/low impact/low type/docs
难度 2/5 1-3 小时 新手友好度 88/100
silverstripe/developer-docs#908 · 1 条评论 ·
-
affects/v5 affects/v6 complexity/low impact/low type/docs
难度 1/5 1 小时以内 新手友好度 90/100
silverstripe/developer-docs#907 · 1 条评论 ·
查看 silverstripe/developer-docs 的全部 Issue
相似的 Issue
-
Support .aac audio uploads可能已有人在做 @julien731 今天认领。 未关闭feature
难度 2/5 1-3 小时 新手友好度 78/100
nimblehq/audio-transcriber#153 ·
-
help wanted
难度 2/5 1-3 小时 新手友好度 68/100
antonyrag/ragleap-core#1062 ·
-
documentation good first issue
难度 1/5 1-3 小时 新手友好度 84/100
sno-ai/sno-station#149 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 1/5 1 小时以内 新手友好度 74/100
catppuccin/firefox#21 ·
-
enhancement help wanted
难度 2/5 1-3 小时 新手友好度 88/100
Git-Hospital/githealthcheck#60 ·
维护者通常 1 天内回复