-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsecurity-policy.html
More file actions
1 lines (1 loc) · 1.75 KB
/
Copy pathsecurity-policy.html
File metadata and controls
1 lines (1 loc) · 1.75 KB
1
<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Security Policy</title><meta name="viewport" content="width=device-width,initial-scale=1"><style>body{font-family:system-ui,-apple-system,"Segoe UI",Roboto,Arial,sans-serif;max-width:720px;margin:2rem auto;padding:1rem;line-height:1.6}code{background:#eee;padding:2px 4px;border-radius:4px}h1{font-size:clamp(1.8rem,4vw,2.4rem);margin-top:0}</style></head><body><h1>Security Policy</h1><p>This document outlines the process for reporting and handling security vulnerabilities affecting this site.</p><h2>Scope</h2><ul><li>Static HTML, CSS, and service worker code in this repository.</li><li>Site configuration served via GitHub Pages.</li><li>Security headers and CSP configuration.</li></ul><h2>Out of Scope</h2><ul><li>Third-party platforms (LinkedIn, GitHub, external blog).</li><li>Browser or CDN infrastructure vulnerabilities.</li></ul><h2>Reporting</h2><p>Email: <a href="mailto:inaki@ifuentes.net">inaki@ifuentes.net</a><br>Languages: English / Spanish.</p><p>Please include reproduction steps, impact assessment, and suggested remediation if possible.</p><h2>Process</h2><ol><li>Report received and acknowledged (≤72h).</li><li>Validation and impact analysis.</li><li>Patch implementation (priority: severity).</li><li>Public acknowledgment (optional) if reporter consents.</li></ol><h2>Security Measures</h2><ul><li>Comprehensive HTTP security headers (CSP, X-Frame-Options, etc.)</li><li>Service worker with origin validation</li><li>External links protected with rel="noopener noreferrer"</li></ul><h2>PGP</h2><p>PGP key / fingerprint available via <a href="https://keybase.io/ifuentes" rel="noopener noreferrer" target="_blank">Keybase</a>.</p><footer><p>Last updated: 2025-12-09</p></footer></body></html>