Skip to content

Latest commit

 

History

History
45 lines (31 loc) · 1.72 KB

SECURITY.md

File metadata and controls

45 lines (31 loc) · 1.72 KB

Security Policy

Supported Versions

Iconizer is currently in development and hasn't had an official release yet. Once we launch version 1.0, we'll provide a table of supported versions here.

Version Supported
dev

Reporting a Vulnerability

We take the security of Iconizer seriously. If you believe you've found a security vulnerability, please follow these steps:

  1. Do Not disclose the vulnerability publicly on GitHub Issues or other forums.

  2. Email the details to either repository owner at [[email protected]] or reach out privately to one of the project maintainers:

  3. Include the following in your report:

    • Description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Any suggestions for remediation if you have them

What to Expect

After submitting a vulnerability report:

  • We'll acknowledge receipt of your report within 48 hours
  • We'll provide an initial assessment of the report within 7 days
  • We'll keep you updated as we work on a fix
  • Once the vulnerability is addressed, we'll credit you (if desired) when we disclose the issue

Security Best Practices for Developers

If you're contributing to Iconizer, please follow these security practices:

  1. Keep dependencies updated
  2. Do not commit credentials or sensitive configuration to the repository
  3. Follow secure coding practices for C# and WPF applications
  4. Use parameterized queries when interacting with any data stores
  5. Handle file system operations securely to prevent path traversal attacks

Thank you for helping keep Iconizer secure!