Daniel Stenberg
c4d88f89a9
BUG-BOUNTY: minor language update
...
... and remove the wording about entries from before 2019 as the "within
12 months" is still there and covers that.
Closes #6318
2020-12-15 08:57:07 +01:00
Daniel Stenberg
a07f376861
BUG-BOUNTY: minor formatting fixes [ci skip]
2019-05-09 23:30:26 +02:00
Daniel Stenberg
489a4be12a
BUG-BOUNTY.md: add the Dropbox "bonus" extra payout ability [ci skip]
...
Closes #3839
2019-05-09 10:03:47 +02:00
Reed Loden
361f9957cb
docs: minor polish to the bug bounty / security docs
...
Closes #3811
2019-04-29 08:09:10 +02:00
Daniel Stenberg
10e4dd6a7b
docs/BUG-BOUNTY: bug bounty time [skip ci]
...
Introducing the curl bug bounty program on hackerone. We now recommend
filing security issues directly in the hackerone ticket system which
only is readable to curl security team members.
Assisted-by: Daniel Gustafsson
Closes #3488
2019-04-22 17:19:19 +02:00
Daniel Stenberg
4a01a20bdb
SECURITY-PROCESS: bountygraph shuts down
...
This backpedals back the documents to the state before bountygraph.
Closes #3311
2018-11-30 22:50:36 +01:00
Daniel Stenberg
db1338474c
docs/BUG-BOUNTY: the sponsors actually decide the amount
...
Retract the previous approach as the sponsors will be the ones to set the
final amounts.
Closes #3152
[ci skip]
2018-10-20 12:07:52 +02:00
Daniel Stenberg
aaab08311b
docs/BUG-BOUNTY.md: for vulns published since Aug 1st 2018
...
[ci skip]
2018-10-12 09:12:44 +02:00
Daniel Stenberg
af500e9378
docs/BUG-BOUNTY: proposed additional docs
...
Bug bounty explainer. See https://bountygraph.com/programs/curl
Closes #3067
2018-10-08 08:45:58 +02:00
