32
41
Fork
You've already forked website
52

Responsible Disclosure #157

Closed
opened 2023年03月07日 19:14:31 +01:00 by Ryuno-Ki · 1 comment
Contributor
Copy link

This is a comment from #153 (comment)

There are chances a project won't respond to security vulnerabilities. Perhaps the maintainer moved on and the repository is orphaned.

I find it important to highlight the practices of vulnerability disclosures here to follow industry standards:

https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html

This is a comment from https://codeberg.org/forgejo/website/pulls/153#issuecomment-827242 There are chances a project won't respond to security vulnerabilities. Perhaps the maintainer moved on and the repository is orphaned. I find it important to highlight the practices of vulnerability disclosures here to follow industry standards: https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html

Let’s close this for now, as no interest has been seen on it. Feel free to reopen if you think it is actionable.

(IMO, it is not necessary to be included in the Forgejo docs.)

Let’s close this for now, as no interest has been seen on it. Feel free to reopen if you think it is actionable. (IMO, it is not necessary to be included in the Forgejo docs.)
Sign in to join this conversation.
No Branch/Tag specified
main
monthly-2026-05
mahlzahn-eslint-js
preview-link-status
nightfire
2022年12月14日-main
No results found.
Labels
Clear labels
404
Broken links or missing content
Accessibility
Accessibility
Blog post
Documentation
Forgejo Documentation
Internationalisation
i18n and l10n
User research - Accessibility
Requires input about accessibility features, likely involves user testing.
User research - Blocked
Do not pick as-is! We are happy if you can help, but please coordinate with ongoing redesign in this area.
User research - Community
Community features, such as discovering other people's work or otherwise feeling welcome on a Forgejo instance.
User research - Config (instance)
Instance-wide configuration, authentication and other admin-only needs.
User research - Errors
How to deal with errors in the application and write helpful error messages.
User research - Filters
How filter and search is being worked with.
User research - Future backlog
The issue might be inspiring for future design work.
User research - Git workflow
AGit, fork-based and new Git workflow, PR creation etc
User research - Labels
Active research about Labels
User research - Moderation
Moderation Featuers for Admins are undergoing active User Research
User research - Needs input
Use this label to let the User Research team know their input is requested.
User research - Notifications/Dashboard
Research on how users should know what to do next.
User research - Rendering
Text rendering, markup languages etc
User research - Repo creation
Active research about the New Repo dialog.
User research - Repo units
The repo sections, disabling them and the "Add more" button.
User research - Security
User research - Settings (in-app)
How to structure in-app settings in the future?
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
forgejo/website#157
Reference in a new issue
forgejo/website
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?