From 9846eeb1a4f70064e8654e5373eb5b4b4ea0d6d2 Mon Sep 17 00:00:00 2001 From: leonrayang Date: Sat, 9 Dec 2023 22:31:32 +0800 Subject: [PATCH] enhance(security document): Add note for user report private security issues with groups.io Signed-off-by: leonrayang --- SECURITY.md | 2 +- master/http_server.go | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index f44d1fdfc..1ddba8879 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,7 +6,7 @@ Join the [security@cubefs.groups.io](mailto:security@cubefs.groups.io) group for We’re extremely grateful for security researchers and users that report vulnerabilities to the CubeFS Open Source Community. All reports are thoroughly investigated by a dedicated committee of community volunteers called [Product Security Committee](./security/security-release-process.md#product-security-committee). -To make a report, please email the private [security@cubefs.groups.io](mailto:security@cubefs.groups.io) list with the security details and the details expected for [all CubeFS bug reports](https://github.com/cubefs/cubefs/blob/master/CONTRIBUTING.md#bug-reports). +To make a report, please email the private [security@cubefs.groups.io](mailto:security@cubefs.groups.io) list with the security details and the details expected for [all CubeFS bug reports](https://github.com/cubefs/cubefs/blob/master/CONTRIBUTING.md#bug-reports).Note: (Groups.io requires users to subscribe to relevant email groups before sending emails. This is to ensure that only group members can send and receive emails within the group, maintaining the security and privacy of the group. Therefore, according to Groups.io's regulations, you need to subscribe to an email group before being able to send emails) ### When Should I Report a Vulnerability? diff --git a/master/http_server.go b/master/http_server.go index d55826525..68c0c2baa 100644 --- a/master/http_server.go +++ b/master/http_server.go @@ -21,7 +21,6 @@ import ( "html" "net/http" "net/http/httputil" - "strings" "time" "github.com/samsarahq/thunder/graphql"