Files
AstralRinth/apps/frontend/src/pages/legal/security.vue
Cal H. 2aabcf36ee refactor: migrate to common eslint+prettier configs (#4168)
* refactor: migrate to common eslint+prettier configs

* fix: prettier frontend

* feat: config changes

* fix: lint issues

* fix: lint

* fix: type imports

* fix: cyclical import issue

* fix: lockfile

* fix: missing dep

* fix: switch to tabs

* fix: continue switch to tabs

* fix: rustfmt parity

* fix: moderation lint issue

* fix: lint issues

* fix: ui intl

* fix: lint issues

* Revert "fix: rustfmt parity"

This reverts commit cb99d2376c321d813d4b7fc7e2a213bb30a54711.

* feat: revert last rs
2025-08-14 20:48:38 +00:00

66 lines
1.9 KiB
Vue

<template>
<div class="markdown-body">
<h1>Security Notice</h1>
<p>
This is the security notice for all Modrinth repositories. The notice explains how
vulnerabilities should be reported.
</p>
<h2>Reporting a Vulnerability</h2>
<p>
If you've found a vulnerability, we would like to know so we can fix it before it is released
publicly.
<strong>Do not open a GitHub issue for a found vulnerability</strong>.
</p>
<p>
Send details to <a href="mailto:jai@modrinth.com">jai@modrinth.com</a>
including:
</p>
<ul>
<li>the website, page or repository where the vulnerability can be observed</li>
<li>a brief description of the vulnerability</li>
<li>
optionally the type of vulnerability and any related
<a href="https://www.owasp.org/index.php/Category:OWASP_Top_Ten_2017_Project">
OWASP category
</a>
</li>
<li>non-destructive exploitation details</li>
</ul>
<p>We will do our best to reply as fast as possible.</p>
<h2>Scope</h2>
<p>The following vulnerabilities <strong>are not</strong> in scope:</p>
<ul>
<li>
volumetric vulnerabilities, for example overwhelming a service with a high volume of
requests
</li>
<li>
reports indicating that our services do not fully align with "best practice", for example
missing security headers
</li>
</ul>
<p>If you aren't sure, you can still reach out via email or direct message.</p>
<hr />
<p>
This notice is inspired by the
<a href="https://www.pythondiscord.com/pages/security-notice/">
Python Discord Security Notice</a
>.
</p>
<p><em>Version 2022-11</em></p>
</div>
</template>
<script setup>
const description =
'The Security Notice of Modrinth, an open source modding platform focused on Minecraft.'
useSeoMeta({
title: 'Security Notice - Modrinth',
description,
ogTitle: 'Security Notice',
ogDescription: description,
})
</script>