moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-23 08:38:49 -05:00
Code Issues Releases Wiki Activity

BUG-BOUNTY: minor formatting fixes [ci skip]

Browse Source
This commit is contained in:
Daniel Stenberg 2019-05-09 23:30:26 +02:00
parent 761b49b91d
commit a07f376861
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
docs/BUG-BOUNTY.md
View File

@ -2,7 +2,7 @@
The curl project runs a bug bounty program in association with The curl project runs a bug bounty program in association with
[HackerOne](https://www.hackerone.com) and the [Internet Bug [HackerOne](https://www.hackerone.com) and the [Internet Bug
Bounty](https://internetbugbounty.org]. Bounty](https://internetbugbounty.org).
# How does it work? # How does it work?
@ -13,10 +13,12 @@ After you have reported a security issue, it has been deemed credible, and a
patch and advisory has been made public, you may be eligible for a bounty from patch and advisory has been made public, you may be eligible for a bounty from
this program. this program.
See all details at https://hackerone.com/curl See all details at [https://hackerone.com/curl](https://hackerone.com/curl)
This bounty is relying on funds from sponsors. If you use curl professionally, This bounty is relying on funds from sponsors. If you use curl professionally,
consider help funding this! See https://opencollective.com/curl for details. consider help funding this! See
[https://opencollective.com/curl](https://opencollective.com/curl) for
details.
# What are the reward amounts? # What are the reward amounts?
@ -28,7 +30,7 @@ We offer reward money *up to* a certain amount per severity. The curl security
team determines the severity of each reported flaw on a case by case basis and team determines the severity of each reported flaw on a case by case basis and
the exact amount rewarded to the reporter is then decided. the exact amount rewarded to the reporter is then decided.
Check out the current award amounts at https://hackerone.com/curl Check out the current award amounts at [https://hackerone.com/curl](https://hackerone.com/curl)
# Who is eligible for a reward? # Who is eligible for a reward?