Skip to content

Security: emeraldhost/documentation

SECURITY.md

Security policy

Read this in Deutsch.

This repository holds public documentation. There is no application code here and no customer database, so a classic vulnerability report does not fit. Two things are still worth reporting, and both privately.

What to report privately

  • A guide exposes something that should not be public, for example a token, a licence key, a password, another customer's IP address or a real e-mail address, in the text or in a screenshot.
  • A guide teaches something dangerous, for example a command that wipes data without warning, disables a firewall or opens a service to the internet.

How to report

Please do not open an issue or a pull request for these two cases. Either one copies the problem into the public history of the repository.

Write to us through the support page instead and name the guide, ideally with its path, for example tutorials/gameserver/minecraft/change-version. We look at it as quickly as we can, correct or unpublish the guide, and tell you what we changed.

Everything else

A broken link, a wrong step, an outdated screenshot or a missing translation is normal feedback and belongs in an issue or a pull request. CONTRIBUTING.md explains how.

There aren't any published security advisories