Skip to content

Commit

Permalink
Update attack_review_ground_rules.md
Browse files Browse the repository at this point in the history
  • Loading branch information
mikesamuel authored Apr 7, 2023
1 parent 757b9aa commit 7f87087
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/attack_review_ground_rules.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,11 +21,11 @@ If you find the web interface cumbersome, feel free to download and test the san

## Reporting Vulnerabilities
Please report successful attacks with example input via [OWASP's bugcrowd queue](https://bugcrowd.com/owaspjavasanitizer)
or contact [@mikesamuel] and I will create a [repository security advisory](https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/creating-a-repository-security-advisory) to coordinate.
or contact `mikesamuel`@`gmail`.`com` and I will create a [repository security advisory](https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/creating-a-repository-security-advisory) to coordinate.

If you wish to be credited, please provide a name or handle for me to credit.

If you wish to remain anonymous and still claim dinner at my expense, please create a sock account, CC `mikesamuel`@`gmail`.`com` and let me know how you will authenticate yourself should we meet.
If you wish to remain anonymous, please create a sock account, and email the address above.

## Out of Bounds
We are testing the HTML sanitizer as written, not the servers on which the test framework runs, so hacking the server to change the code behind it or rewrite the HTML sanitizer is out of bounds.
Expand Down

0 comments on commit 7f87087

Please sign in to comment.