| Version | Supported |
|---|---|
| Latest (main branch) | ✅ Active support |
We take security seriously. If you discover a security vulnerability in Islamic Planner, please report it responsibly.
- Email: Send details to security@barakah.app (or the project maintainer's email)
- Subject line:
[SECURITY] Brief description of the issue - Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact assessment
- Suggested fix (if any)
- Acknowledgment: Within 48 hours of your report
- Initial assessment: Within 5 business days
- Resolution timeline: Critical issues — 24-72 hours; High — 1-2 weeks; Medium/Low — next release cycle
- DO NOT open a public GitHub issue for security vulnerabilities
- DO NOT exploit the vulnerability beyond what is necessary to demonstrate it
- DO provide sufficient detail to reproduce the issue
- DO allow reasonable time for the fix before public disclosure
The following are in scope:
- Authentication and authorization bypasses
- Data exposure or leakage
- Cross-site scripting (XSS)
- Injection vulnerabilities
- Firestore security rules bypasses
- Cloud Functions vulnerabilities
We appreciate responsible disclosure and will credit security researchers (with their permission) in our release notes.
JazakAllahu Khairan for helping keep our community safe.