Where is a good place to report/discuss possible security issues?
Moderator: Forum Moderators
Forum rules
Before reporting issues in this section, you must read the following topic:
Before reporting issues in this section, you must read the following topic:
Where is a good place to report/discuss possible security issues?
Is there a place where security issues can be reported privately, to avoid publicly disclosing possible vulnerabilities?
Obviously the forum is public, and I think the GitHub bug tracker is entirely public too, so reporting unfixed vulnerabilities in either place would not be responsible disclosure.
For example, is there an email address where security-related reports should be sent?
Obviously the forum is public, and I think the GitHub bug tracker is entirely public too, so reporting unfixed vulnerabilities in either place would not be responsible disclosure.
For example, is there an email address where security-related reports should be sent?
Re: Where is a good place to report/discuss possible security issues?
We don't have a specific medium for this kind of issue at the moment, but you are welcome to message the project manager (currently Vultraz) about it if it affects the game, or a Wesnoth.org staff member if it affects the website.
Author of the unofficial UtBS sequels Invasion from the Unknown and After the Storm.