From 71b0d26ce0ebfdfcd93daaba9632e7212589f3b3 Mon Sep 17 00:00:00 2001 From: Rod Vagg Date: Thu, 11 Jun 2015 20:37:37 +1000 Subject: [PATCH] doc: add security section to README --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 91215810ad0d9d..8516b228e01856 100644 --- a/README.md +++ b/README.md @@ -280,7 +280,16 @@ Instructions: [#io.js on Freenode.net](http://webchat.freenode.net?channels=io.js&uio=d4) * [iojs/io.js on Gitter](https://gitter.im/nodejs/io.js) +## Security +All security bugs in io.js are taken seriously and should be reported by +emailing security@iojs.org. This will be delivered to a subset of the project +team who handle security issues. Please don't disclose security bugs +public until they have been handled by the security team. + +Your email will be acknowledged within 24 hours, and you’ll receive a more +detailed response to your email within 48 hours indicating the next steps in +handling your report. ## Current Project Team Members