synced/tinode-chat
1
0
Fork 0
mirror of https://github.com/tinode/chat.git synced 2025-03-14 10:05:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
tinode-chat/SECURITY.md
or-else 6d5c407c50 clarify what not to report as security problems
2024-12-21 10:35:44 +03:00

470 B
Raw Permalink Blame History

Security Policy

Reporting a Vulnerability

Please report a vulnerability to security@tinode.co.

What not to report

  • Firebase initialization tokens. The Firebase tokens are really public: they must be included into client applications and consequently are not private by design.
  • Exposed /pprof or /expvar. We know they are exposed. It's intentional and harmless.
  • Exposed Prometheus metrics /metrics. Like above, it's intentional and harmless.