Skip to content

SECURITY.md

Latest commit

 

History

History
48 lines (29 loc) · 2.34 KB

SECURITY.md

File metadata and controls

48 lines (29 loc) · 2.34 KB
Raw

Reporting Security Issues

The security of Encatch and its users is important to us. If you believe you have discovered a security vulnerability in this Docusaurus example project, the Encatch SDK integration, or the Encatch platform, we encourage you to report it responsibly.

We investigate all legitimate security reports and work to resolve confirmed vulnerabilities as quickly as possible.

Scope

This repository is a sample Docusaurus documentation site that demonstrates Encatch page feedback. Security reports we care about include:

  • Vulnerabilities in this example's integration code (for example, unsafe handling of user input or client-side data in the Docusaurus feedback flow)
  • Issues in how the example loads or initializes the Encatch Web SDK
  • Vulnerabilities in the Encatch Web SDK, API, or platform when discovered through this example

Not security issues: Questions about Docusaurus setup, installation, configuration, or general documentation feedback. For those, please open a regular GitHub issue or contact support@encatch.com.

Publishable Keys

This example uses an Encatch publishable key in local configuration. Publishable keys are intended for client-side use and are not secret credentials. Please do not report exposure of a publishable key as a security vulnerability.

Never commit private or server-side API keys, access tokens, or other sensitive credentials.

How to Report

Please do not disclose security vulnerabilities publicly (including GitHub issues or pull requests) until they have been investigated and addressed.

Instead, report the issue by emailing:

support@encatch.com

Please include as much information as possible, including:

  • A description of the vulnerability
  • Steps to reproduce the issue
  • The affected component (this example repository, Encatch Web SDK, or Encatch platform)
  • Proof of concept (if available)
  • Potential impact

What to Expect

After receiving your report, we will:

  • Acknowledge receipt of your report as soon as possible
  • Investigate the issue and assess its impact
  • Keep you informed of our progress when appropriate
  • Credit you for your responsible disclosure, if you would like to be acknowledged

We appreciate the efforts of security researchers and the community in helping keep Encatch secure.