Skip to content

Security: sergihejo/cbya-modelo182

SECURITY.md

Security Policy

This project prioritises the security of the data:

  • Data is NOT stored: Sensible data such as NIF/CIF, names, phones or adresses are not stored on disk. They are only used during the conversion.
  • Data validation: Validations are done, in both frontend and backend, to asure that the input data is correct and consistent.

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

If you have encountered a potential security vulnerability in this project, please report it to us at [email protected]. We will work with you to verify the vulnerability and patch it.

When reporting issues, please provide the following information:

  • Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
  • Full paths of source file(s) related to the manifestation of the issue
  • The location of the affected source code (tag/branch/commit or direct URL)
  • Any special configuration required to reproduce the issue
  • Step-by-step instructions to reproduce the issue
  • Proof-of-concept or exploit code (if possible)
  • Impact of the issue, including how an attacker might exploit the issue

We request that you contact us via the email address above and give the project contributors a chance to resolve the vulnerability and issue a new release prior to any public exposure; this helps protect the project's users, and provides them with a chance to upgrade and/or update in order to protect their applications.

There aren’t any published security advisories