mirror of
https://github.com/PowerShell/PowerShell.git
synced 2024-11-23 17:53:58 +08:00
Update our language on our policy applying to security issues (#10304)
This commit is contained in:
parent
9eb5587d07
commit
d84ebc1571
7
.github/SECURITY.md
vendored
7
.github/SECURITY.md
vendored
@ -1,5 +1,12 @@
|
||||
# Security Vulnerabilities
|
||||
|
||||
Security issues are treated very seriously and will, by default,
|
||||
takes precedence over other considerations including usability, performance,
|
||||
etc... Best effort will be used to mitigate side effects of a security
|
||||
change, but PowerShell must be secure by default.
|
||||
|
||||
## Reporting a security vulnerability
|
||||
|
||||
If you believe that there is a security vulnerability in PowerShell,
|
||||
it **must** be reported to [secure@microsoft.com](https://technet.microsoft.com/security/ff852094.aspx) to allow for [Coordinated Vulnerability Disclosure](https://technet.microsoft.com/security/dn467923).
|
||||
**Only** file an issue, if [secure@microsoft.com](https://www.microsoft.com/en-us/msrc/faqs-report-an-issue?rtc=1) has confirmed filing an issue is appropriate.
|
||||
|
Loading…
Reference in New Issue
Block a user