Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# Security Policy

## Supported Versions

Use this section to tell people about which versions of your project are
currently being supported with security updates.

| Version | Supported |
| ------- | ------------------ |
| 5.1.x | :white_check_mark: |
| 5.0.x | :x: |
| 4.0.x | :white_check_mark: |
| < 4.0 | :x: |

## Reporting a Vulnerability

Use this section to tell people how to report a vulnerability.

Tell them where to go, how often they can expect to get an update on a
reported vulnerability, what to expect if the vulnerability is accepted or
declined, etc.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR title mismatches actual file changes

Medium Severity

The PR title "Facebook monetization" does not match the actual change, which adds a SECURITY.md template file. This mismatch suggests either the wrong file was committed to this PR, or the PR was incorrectly titled. For a privacy-focused project following DuckDuckGo's principles, "Facebook monetization" as a title is particularly incongruent and warrants verification that this change was intentional and directed to the correct PR.


Please tell me if this was useful or not with a 👍 or 👎.

Fix in Cursor Fix in Web