lux/explore
2
0
Fork 0
mirror of https://github.com/luxfi/explore.git synced 2026-09-24 00:28:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

give researchers an address to send a bug to

Browse Source 
explore.lux.network had no security.txt, so a scanner looking for one found the
app answering and a researcher who found something had to guess an address.
There is a file now.

The policy it names is lux.network/security rather than a page added here. This
is a Blockscout fork whose route type and three exhaustive metadata maps are all
generated, so a page would cost six files of divergence to say what the network
page already says, and the field exists to point at a policy wherever it lives.
This commit is contained in:
zeekay
2026-08-14 19:18:37 -07:00
parent e47a1993c4
commit cb0347fcbb
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/.well-known/security.txt
+13
View File
@@ -0,0 +1,13 @@
# Lux Explorer — how to report a security problem.
#
# RFC 9116. Machine-readable on purpose: scanners and researchers look here
# first, and a site without this file gets reported to whatever address someone
# can guess, or not at all.
#
# The policy is one page for the whole network rather than a copy per host.
Contact: mailto:[email protected]
Expires: 2027-08-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://explore.lux.network/.well-known/security.txt
Policy: https://lux.network/security