Merge pull request #18323 from timvandermeij/security-followup

Improve the security policy
This commit is contained in:
Tim van der Meij 2024-06-24 16:08:31 +02:00 committed by GitHub
commit e16707d6e2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 1 additions and 4 deletions

View file

@ -3,6 +3,3 @@ contact_links:
- name: Need help?
url: https://github.com/mozilla/pdf.js/discussions
about: If you need help on how to use PDF.js, please open a discussion where other community members can reply
- name: Security report
url: https://bugzilla.mozilla.org/enter_bug.cgi?product=Firefox&component=PDF%20Viewer&groups=firefox-core-security
about: Please report security vulnerabilities in Firefox's bug tracker, making sure that the checkbox in the "Security" section is selected

2
.github/SECURITY.md vendored
View file

@ -8,6 +8,6 @@ Mozilla takes the security of our software seriously. If you believe you have fo
Instead, please report security vulnerabilities in [Bugzilla](https://bugzilla.mozilla.org/enter_bug.cgi?product=Firefox&component=PDF%20Viewer&groups=firefox-core-security) and make sure that the checkbox in the "Security" section is checked so the required access controls are automatically configured:
![Security checkbox](security.png)
![Security checkbox](https://github.com/mozilla/pdf.js/blob/master/.github/security.png)
The Mozilla security team will process the bug as described in [Mozilla's security bugs policy](https://www.mozilla.org/en-US/about/governance/policies/security-group/bugs).