Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated support email #1666

Merged
merged 1 commit into from
Feb 19, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 35 additions & 17 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,42 +2,60 @@

## Reporting a Security Vulnerability

If you discover a security vulnerability in the Miru Web project, please follow these guidelines to report it responsibly:
If you discover a security vulnerability in the Miru Web project, please follow
these guidelines to report it responsibly:

1. **Privately Notify the Maintainers:** To report a security issue, please contact the project maintainers privately by emailing [mirusupport@saeloun.com](mailto:mirusupport@saeloun.com). Do not disclose the issue publicly until it has been resolved.
1. **Privately Notify the Maintainers:** To report a security issue, please
contact the project maintainers privately by emailing
[hello@saeloun.com](mailto:hello@saeloun.com). Do not disclose the issue
publicly until it has been resolved.

2. **Provide Details:** When reporting the issue, please provide detailed information about the vulnerability, including:
- A clear description of the vulnerability.
- Steps to reproduce the vulnerability.
- Information about the affected versions of the project.
- Any additional context or details that might be helpful.
2. **Provide Details:** When reporting the issue, please provide detailed
information about the vulnerability, including:

3. **Do Not Share Exploits:** Do not publicly share any details of the vulnerability, including proof-of-concept exploits or other code that demonstrates the issue.
- A clear description of the vulnerability.
- Steps to reproduce the vulnerability.
- Information about the affected versions of the project.
- Any additional context or details that might be helpful.

4. **Keep Communication Confidential:** Please keep all communication regarding the security issue confidential until the maintainers confirm that the issue has been resolved.
3. **Do Not Share Exploits:** Do not publicly share any details of the
vulnerability, including proof-of-concept exploits or other code that
demonstrates the issue.

4. **Keep Communication Confidential:** Please keep all communication regarding
the security issue confidential until the maintainers confirm that the issue
has been resolved.

## Vulnerability Handling Process

Once a security vulnerability is reported, the project maintainers will follow these steps:
Once a security vulnerability is reported, the project maintainers will follow
these steps:

1. **Initial Review:** The maintainers will review the report to confirm the vulnerability's validity and severity.
1. **Initial Review:** The maintainers will review the report to confirm the
vulnerability's validity and severity.

2. **Patch Development:** If the vulnerability is confirmed, the maintainers will work on developing a patch to address it.
2. **Patch Development:** If the vulnerability is confirmed, the maintainers
will work on developing a patch to address it.

3. **Testing and Validation:** The patch will be thoroughly tested to ensure that it resolves the vulnerability without introducing new issues.
3. **Testing and Validation:** The patch will be thoroughly tested to ensure
that it resolves the vulnerability without introducing new issues.

4. **Release:** A new version of the project containing the security fix will be released. The maintainers will notify the reporter when the fix is ready.
4. **Release:** A new version of the project containing the security fix will be
released. The maintainers will notify the reporter when the fix is ready.

5. **Public Disclosure:** After a fixed version is released, the security issue will be publicly disclosed, along with the details of the fix.
5. **Public Disclosure:** After a fixed version is released, the security issue
will be publicly disclosed, along with the details of the fix.

## Supported Versions

The project currently supports the following versions:

- Version 0.20.0 (Latest Release)

Security issues will be addressed in the latest supported version. If you are using an older version, it is recommended to upgrade to the latest release.
Security issues will be addressed in the latest supported version. If you are
using an older version, it is recommended to upgrade to the latest release.

## Contact

If you have any questions or need further clarification on this security policy, please contact us at [mirusupport@saeloun.com](mailto:mirusupport@saeloun.com).
If you have any questions or need further clarification on this security policy,
please contact us at [hello@saeloun.com](mailto:hello@saeloun.com).
Original file line number Diff line number Diff line change
Expand Up @@ -168,7 +168,7 @@ const PrivacyPolicyModal = ({ isOpen, onClose }) => (
className="form__link inline cursor-pointer"
href={MIRU_APP_SUPPORT_EMAIL_ID}
>
mirusupport@saeloun.com.
hello@saeloun.com.
</a>
</p>
<h3 className="mt-2 text-lg font-semibold">
Expand Down Expand Up @@ -419,7 +419,7 @@ const PrivacyPolicyModal = ({ isOpen, onClose }) => (
className="form__link inline cursor-pointer"
href={MIRU_APP_SUPPORT_EMAIL_ID}
>
mirusupport@saeloun.com.
hello@saeloun.com.
</a>
</p>
</div>
Expand Down
2 changes: 1 addition & 1 deletion app/javascript/src/constants/index.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ export enum LocalStorageKeys {
}

export const MIRU_APP_URL = "https://miru.so/";
export const MIRU_APP_SUPPORT_EMAIL_ID = "mailto:mirusupport@saeloun.com";
export const MIRU_APP_SUPPORT_EMAIL_ID = "mailto:hello@saeloun.com";
export const GOOGLE_PRIVACY_URL =
"https://policies.google.com/privacy?hl=en-US";
export const AWS_PRIVACY_URL = "https://aws.amazon.com/privacy/";
Expand Down
Loading