From 34f3326d6fb38971cad9c65816d55b90d4a17239 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Go=C5=82=C4=99biowski-Owczarek?= Date: Mon, 18 Jul 2022 13:39:40 +0200 Subject: [PATCH 1/2] Docs: Add a security policy in SECURITY.md This is needed so that people know how to report security issues. --- SECURITY.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000000..e6bfaab6f53 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,12 @@ +# Security Policy + +## Supported Versions + +The [latest released version](https://github.com/jquery/jquery-ui/releases) of jQuery is supported. + +## Reporting a Vulnerability + +Please email security@jquery.com, and we will respond as quickly as possible. + +If the vulnerability is considered valid and accepted, a patch will be made for the latest jQuery version. +If the vulnerability is deemed invalid, no further action is required. From c42f81e0bcf9b502ed6e7036838d14a3d12f99c3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Go=C5=82=C4=99biowski-Owczarek?= Date: Tue, 19 Jul 2022 18:27:29 +0200 Subject: [PATCH 2/2] fixup! Docs: Add a security policy in SECURITY.md --- SECURITY.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index e6bfaab6f53..fae31da8522 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,11 +2,10 @@ ## Supported Versions -The [latest released version](https://github.com/jquery/jquery-ui/releases) of jQuery is supported. +The [latest released version](https://github.com/jquery/jquery-ui/releases) of jQuery UI is supported. ## Reporting a Vulnerability Please email security@jquery.com, and we will respond as quickly as possible. -If the vulnerability is considered valid and accepted, a patch will be made for the latest jQuery version. -If the vulnerability is deemed invalid, no further action is required. +If the vulnerability is considered valid and accepted, a patch will be made for the latest jQuery UI version. If the vulnerability is deemed invalid, no further action is required.