Please do NOT raise a GitHub Issue, discussions or pull request to report a security vulnerability. If you believe you have found a security vulnerability, please submit a report to [email protected] preferably with a proof of concept.
Please include as much of the information listed below as you can to help us better understand and resolve the issue:
- Step-by-step instructions to reproduce the issue
- Proof-of-concept
- Impact of the issue
- The location of the source code (tag/branch/commit or direct URL)
- Any special configuration required to reproduce the issue (if there are)
- Rule form type (Redirect Request, Modify Header, ...etc)
- Rule form fields values (conditions, destination, editor value, ...etc)
This information will help us to quickly fix the issue.
You should receive a response within 24-48 hours.
Non-vulnerability related security issues such as new great new ideas for security features are welcome on GitHub Issues.