Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

add security.txt

See original GitHub issue

Feature request

Feature description

Add a configuration option for the security.txt file. It could look like:

#security.txt
location /security.txt {
    return 301 http://$host/.well-known/security.txt;
}

location = /.well-known/security.txt {
    alias /<User configurable path>/security.txt
}

Source/ inspired by

How the feature is useful

The security.txt is comparable to the robots.txt and serves contact information etc. to security researchers. More information can be found on their site.

Issue Analytics

State:
Created 3 years ago
Comments:13 (10 by maintainers)

Top GitHub Comments

1reaction

MattIPv4commented, Oct 6, 2020

Go for it 👍

0reactions

MattIPv4commented, Oct 27, 2020

Merged & deployed in prod. Ty all

Top Results From Across the Web

security.txt: Proposed standard for defining security policies

A proposed standard that allows websites to define security policies. ... Add another alternative. Expires Required Only 1 allowed.

Does Your Organization Have a Security.txt File?

The idea behind Security.txt is straightforward: The organization places a file called security.txt in a predictable place — such as example.com ...

Security.txt - Wikipedia

security.txt is a proposed standard for websites' security information that is meant to allow security researchers to easily report security vulnerabilities.

securitytxt/security-txt: A proposed standard that ... - GitHub

security.txt provides a way for websites to define security policies. The security.txt file sets clear guidelines for security researchers on how to report ......

What Is a Security.txt File and How Can It Help Your Program?

Security.txt is a security mechanism that allows your organization to provide its vulnerability disclosure policy and contact information in ...