Merge pull request #417 from ZeusWPI/security.txt

Add responsible disclosure policy
This commit is contained in:
redfast00 2020-11-19 04:53:30 +01:00 committed by GitHub
commit f8a286da25
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 12 additions and 1 deletions

4
Rules
View file

@ -235,6 +235,10 @@ route '/**/*.{erb,html,md}' do
"#{item.identifier.without_ext}/index.html"
end
route %r[/well-known/(.+)] do |rest|
"/.well-known/" + rest[0]
end
# Let anything else simply pass through
passthrough '/**/*'

View file

@ -0,0 +1,3 @@
Contact: mailto:admin@zeus.ugent.be
Preferred-Languages: nl,en
Policy: https://git.zeus.gent/bestuur/drive/-/blob/master/varia/responsible_disclosure_policy_nl.md

View file

@ -39,6 +39,10 @@
<a href="/about/privacy">
<span class="hidden-xs">Privacy</span>
<%= fa :'user-secret' %>
</a> |
<a href="/.well-known/security.txt">
<span class="hidden-xs">Responsible Disclosure Policy</span>
<%= fa :'lock' %>
</a>
</p>
</div>