diff options
| author | Lauri Ojansivu <x@xet7.org> | 2020-03-06 03:52:12 +0200 |
|---|---|---|
| committer | Lauri Ojansivu <x@xet7.org> | 2020-03-06 03:52:12 +0200 |
| commit | 2b26bbe78a1a2b8b427963a6c44c3853efdb737e (patch) | |
| tree | 90a71801d84a4c0a019e072a953299bbc0a2962d /packages/markdown/marked/SECURITY.md | |
| parent | a6d702d1ab9906898dab4cacec735043e5618fb1 (diff) | |
| download | wekan-2b26bbe78a1a2b8b427963a6c44c3853efdb737e.tar.gz wekan-2b26bbe78a1a2b8b427963a6c44c3853efdb737e.tar.bz2 wekan-2b26bbe78a1a2b8b427963a6c44c3853efdb737e.zip | |
Fix: img tag did not allow width and height.
Removed swipebox from markdown editor img tag and
updated marked markdown to newest version.
Thanks to hradec and xet7 !
Closes #2956
Diffstat (limited to 'packages/markdown/marked/SECURITY.md')
| -rw-r--r-- | packages/markdown/marked/SECURITY.md | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/packages/markdown/marked/SECURITY.md b/packages/markdown/marked/SECURITY.md new file mode 100644 index 00000000..4a2e1cb4 --- /dev/null +++ b/packages/markdown/marked/SECURITY.md @@ -0,0 +1,10 @@ +# Security Policy + +The only completely secure system is the one that doesn't exist in the first place. +Having said that, we take the security of Marked very seriously. + +## Reporting a Vulnerability + +Please disclose potential security issues by email to the project [committers](https://marked.js.org/#/AUTHORS.md) as well as the [listed owners within NPM](https://docs.npmjs.com/cli/owner). +We will provide an initial assessment of security reports within 48 hours and should apply patches within 2 weeks +(also, feel free to contribute a fix for the issue). |