From e255b09899e07381cde1a381c288573704c2aeff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elias=20H=C3=B6rner?= Date: Tue, 28 Jul 2026 16:48:52 +0200 Subject: [PATCH 1/5] Update security --- SECURITY.md | 2 +- src/Turnierplan.App/wwwroot/.well-known/security.txt | 10 ++++++++++ 2 files changed, 11 insertions(+), 1 deletion(-) create mode 100644 src/Turnierplan.App/wwwroot/.well-known/security.txt diff --git a/SECURITY.md b/SECURITY.md index 5847ed44..8e70a9b6 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -18,4 +18,4 @@ The used version scheme is `YYYY.N.P` consisting of the year of the major releas **Do not report security vulnerabilities using GitHub issues!** -If you found a security vulnerability, please contact `security@turnierplan.net`. +If you found a security vulnerability, please report via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories) or contact `security@turnierplan.net`. diff --git a/src/Turnierplan.App/wwwroot/.well-known/security.txt b/src/Turnierplan.App/wwwroot/.well-known/security.txt new file mode 100644 index 00000000..c99ea7bd --- /dev/null +++ b/src/Turnierplan.App/wwwroot/.well-known/security.txt @@ -0,0 +1,10 @@ +# This site is running turnierplan.NET +# ==================================== +# turnierplan.NET is an open-source tournament hosting software. +# Security problems related to this software shall be reported to the maintainers of the open-source repository: +Policy: https://github.com/turnierplan-NET/turnierplan.NET/security/policy +Contact: https://github.com/turnierplan-NET/turnierplan.NET/security/advisories/new +Contact: mailto:security@turnierplan.net +Preferred-Languages: de, en +# Security problems related to this installation of the software shall be reported to the corresponding administrators directly. +Expires: 2027-08-31T23:59:00Z From e95fda7e1bebb2ea9510a2985cfbc1ecdc4ab00b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elias=20H=C3=B6rner?= Date: Tue, 28 Jul 2026 16:51:03 +0200 Subject: [PATCH 2/5] Change wording slightly --- src/Turnierplan.App/wwwroot/.well-known/security.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Turnierplan.App/wwwroot/.well-known/security.txt b/src/Turnierplan.App/wwwroot/.well-known/security.txt index c99ea7bd..ac6bd54b 100644 --- a/src/Turnierplan.App/wwwroot/.well-known/security.txt +++ b/src/Turnierplan.App/wwwroot/.well-known/security.txt @@ -6,5 +6,5 @@ Policy: https://github.com/turnierplan-NET/turnierplan.NET/security/policy Contact: https://github.com/turnierplan-NET/turnierplan.NET/security/advisories/new Contact: mailto:security@turnierplan.net Preferred-Languages: de, en -# Security problems related to this installation of the software shall be reported to the corresponding administrators directly. +# Security problems related to this installation of the software shall be reported to the corresponding administrators instead. Expires: 2027-08-31T23:59:00Z From 0748e8a8ddbe7cddfed3808431c76acc8ac31651 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elias=20H=C3=B6rner?= Date: Tue, 28 Jul 2026 16:51:41 +0200 Subject: [PATCH 3/5] Try different formatting --- SECURITY.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 8e70a9b6..469ed1c5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -18,4 +18,6 @@ The used version scheme is `YYYY.N.P` consisting of the year of the major releas **Do not report security vulnerabilities using GitHub issues!** -If you found a security vulnerability, please report via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories) or contact `security@turnierplan.net`. +If you found a security vulnerability, please report via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories) or contact the following email address: + +> `security@turnierplan.net` From 2442796bfcdf4c3010607ef02327947bca9694d6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elias=20H=C3=B6rner?= Date: Tue, 28 Jul 2026 16:52:24 +0200 Subject: [PATCH 4/5] Try different formatting --- SECURITY.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 469ed1c5..353ae7bb 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -18,6 +18,4 @@ The used version scheme is `YYYY.N.P` consisting of the year of the major releas **Do not report security vulnerabilities using GitHub issues!** -If you found a security vulnerability, please report via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories) or contact the following email address: - -> `security@turnierplan.net` +If you found a security vulnerability, please report via the problem via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories) or contact the following email address: [security@turnierplan.net](mailto:security@turnierplan.net). From 3c5c977415c5b854dcfc8a7ec5d1ee995e311a36 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elias=20H=C3=B6rner?= Date: Tue, 28 Jul 2026 16:52:49 +0200 Subject: [PATCH 5/5] Fix link --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 353ae7bb..3e96a359 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -18,4 +18,4 @@ The used version scheme is `YYYY.N.P` consisting of the year of the major releas **Do not report security vulnerabilities using GitHub issues!** -If you found a security vulnerability, please report via the problem via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories) or contact the following email address: [security@turnierplan.net](mailto:security@turnierplan.net). +If you found a security vulnerability, please report via the problem via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories/new) or contact the following email address: [security@turnierplan.net](mailto:security@turnierplan.net).