Merge pull request #417 from ZeusWPI/security.txt

Add responsible disclosure policy

Rules

@@ -235,6 +235,10 @@ route '/**/*.{erb,html,md}' do
   "#{item.identifier.without_ext}/index.html"
 end
 
+route %r[/well-known/(.+)] do |rest|
+  "/.well-known/" + rest[0]
+end
+
 # Let anything else simply pass through
 passthrough '/**/*'
 

content/well-known/security.txt

@@ -0,0 +1,3 @@
+Contact: mailto:admin@zeus.ugent.be
+Preferred-Languages: nl,en
+Policy: https://git.zeus.gent/bestuur/drive/-/blob/master/varia/responsible_disclosure_policy_nl.md

layouts/partials/_footer.erb

@@ -39,6 +39,10 @@
         <a href="/about/privacy">
           <span class="hidden-xs">Privacy</span>
           <%= fa :'user-secret' %>
+        </a> |
+        <a href="/.well-known/security.txt">
+          <span class="hidden-xs">Responsible Disclosure Policy</span>
+          <%= fa :'lock' %>
         </a>        
       </p>
     </div>