view doc/security.txt @ 7399:deb8e7e6d66d

Skip redis tests if unable to communicate with the server. If the redis module is in the test environment, the redis tests will not be skipped. If connecting to redis during testing fails with a ConnectionError because there is no redis server at localhost, or if it fails with an AuthenticationError, you would fail a slew of tests. This causes the tests to report as skipped if either of the two errors occurs. It is very inefficient as it fails in setup() for the tests, but at least it does report skipping the tests. Also documented how to pass the redis password to the tests in the test part of the install docs. Future note: running tests needs proper docs in development.txt (including database setup) and a link left to that doc in installation.txt.
author John Rouillard <rouilj@ieee.org>
date Wed, 24 May 2023 12:52:53 -0400
parents a3223f1966fc
children 186956a87ad7
line wrap: on
line source

.. meta::
    :description:
        Documentation on how to report security issues with
        Roundup. Also index to security related portions in other
        Roundup documentation.

.. index::
   single: Reporting Security Issues
   single: Security Issues, Reporting


======================================
Reporting Security Issues with Roundup
======================================

Security issues with Roundup should be reported by email to:

   rouilj@users.sourceforge.net  (John Rouillard)

   rsc@runtux.com (Ralf Schlatterbeck)

Also you can find rouilj on irc in channel #roundup at irc.oftc.net (see
Contact_ for more directions and web interface).

Use these mechanisms to establish initial contact.

.. _Contact: https://www.roundup-tracker.org/contact.html

Roundup Issue Tracker: http://roundup-tracker.org/