/security
If you believe you've found a security vulnerability related to this site or its associated projects, please report it responsibly.
> Reporting a vulnerability
- Contact: january1073@proton.me
- PGP key: 45E6 0353 BB03 2909 071A 1EBA 841A AC39 A074 238D
- Preferred languages: English, Chinese (中文), German (Deutsch)
Please encrypt sensitive reports with the PGP key above.
> What to include
When reporting, please include as much of the following as you can:
- A description of the vulnerability and its potential impact
- Steps to reproduce, including any proof-of-concept code
- Affected URLs, endpoints, or repositories
- Any relevant logs, screenshots, or configuration details
> Response expectations
- I'll acknowledge receipt of your report as soon as reasonably possible.
- I'll keep you informed as I investigate and work on a fix.
- Please allow a reasonable time for remediation before any public disclosure.
- Coordinated disclosure is appreciated; credit will be given unless you request otherwise.
> Scope
This policy covers the security of this website and the open-source projects linked from it. Third-party services and integrations are out of scope unless the vulnerability is specific to how they're used here.
> Safe harbor
Good-faith security research conducted in accordance with this policy — without accessing, modifying, or exfiltrating data beyond what's needed to demonstrate the issue — will not be pursued legally.
This policy is referenced by security.txt per RFC 9116.
