Skip to content

Security: hazeliscoding/conatlas-tx

SECURITY.md

Security policy

ConAtlas TX is a static site: plain files built from the data in this repository, with no accounts, server or database. Security problems are still possible, for example:

  • script injection or a way to run code in a visitor's browser
  • a malicious or hijacked link in the convention data
  • a weakness in the build, CI workflows or dependencies
  • tampered data that could send fans to the wrong place or a fake ticket site

The main branch is supported, and so is the site at https://conatlas-tx.vercel.app/.

Reporting a vulnerability

Please report privately, not in a public issue:

Include what you found, how to reproduce it, and what someone could do with it. You'll get a reply once the maintainer has looked at it, and credit in the fix if you'd like it.

A wrong date or venue is not a security problem. Use the correction form for those.

There aren't any published security advisories