romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-24 02:27:20 +03:00
Code Issues Projects Releases Packages Wiki Activity

VULN-DISCLOSURE-POLICY.md: fix typos

Browse source 
Closes #17796
This commit is contained in:
Marcel Lang 2025-07-01 15:06:24 +02:00 • committed by Daniel Stenberg
parent dc28bb86c1
commit 10432ffb6a
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/VULN-DISCLOSURE-POLICY.md
View file

@ -168,7 +168,7 @@ severity levels is hard enough for us.
When deciding severity level on a particular issue, we take all the factors
into account: attack vector, attack complexity, required privileges, necessary
build configuration, protocols involved, platform specifics and also what
effects a possible exploit or trigger of the issue can lead do, including
effects a possible exploit or trigger of the issue can lead to, including
confidentiality, integrity or availability problems.
## Low
@ -256,8 +256,8 @@ Vulnerabilities in features which are off by default (in the build) and
documented as experimental, or exist only in debug mode, are not eligible for a
reward and we do not consider them security problems.
The same applies to scripts and software which are not installed by default by
the make install rule.
The same applies to scripts and software which are not installed by default
through the make install rule.
## URL inconsistencies
@ -272,7 +272,7 @@ Obvious parser bugs can still be vulnerabilities of course.
The curl command blanks the contents of a number of command line arguments to
prevent them from appearing in process listings. It does not blank all
arguments even if some of them that are not blanked might contain sensitive
arguments, even though some that are not blanked might contain sensitive
data. We consider this functionality a best-effort and omissions are not
security vulnerabilities.