docs/BUG-BOUNTY: bug bounty time [skip ci]

Introducing the curl bug bounty program on hackerone. We now recommend
filing security issues directly in the hackerone ticket system which
only is readable to curl security team members.

Assisted-by: Daniel Gustafsson

Closes #3488
This commit is contained in:
Daniel Stenberg 2019-04-20 12:19:47 +02:00
parent eb84ca3ea8
commit 10e4dd6a7b
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
6 changed files with 130 additions and 32 deletions

View file

@ -50,6 +50,11 @@ To download the very latest source from the Git server do this:
(you'll get a directory named curl created, filled with the source code)
## Security problems
Report supected security problems on [our hackerone
page](https://hackerone.com/curl) and not in public!
## Notice
Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga