view doc/security.txt @ 7112:c0d030bd472e

Fix: Send Content-Length header to client from top Exception handler The top exception handler in run_cgi wasn't sending the Content-Length header for the error message. This resulted in a hung client. Probably wasn't an issue with http 1.0, but when using 1.1 it's required.
author John Rouillard <rouilj@ieee.org>
date Sun, 11 Dec 2022 18:47:24 -0500
parents a3223f1966fc
children 186956a87ad7
line wrap: on
line source

.. meta::
    :description:
        Documentation on how to report security issues with
        Roundup. Also index to security related portions in other
        Roundup documentation.

.. index::
   single: Reporting Security Issues
   single: Security Issues, Reporting


======================================
Reporting Security Issues with Roundup
======================================

Security issues with Roundup should be reported by email to:

   rouilj@users.sourceforge.net  (John Rouillard)

   rsc@runtux.com (Ralf Schlatterbeck)

Also you can find rouilj on irc in channel #roundup at irc.oftc.net (see
Contact_ for more directions and web interface).

Use these mechanisms to establish initial contact.

.. _Contact: https://www.roundup-tracker.org/contact.html

Roundup Issue Tracker: http://roundup-tracker.org/