1(self.webpackChunkw3f_website_gatsby=self.webpackChunkw3f_website_gatsby||[]).push([[866],{1721:function(e,t,a){"use strict";a.r(t);var r=a(7294),n=a(8315),l=a(5613),s=a(1084),o=a(8260),i=a(3492),c=a(6192);t.default=function(e){var t=e.data,a=t.page,m=t.footerImage,u=(0,n.$)().t,d=a.frontmatter.seo,p=d?Object.assign({},d):{};return r.createElement(s.Z,{footerImage:m},r.createElement(l.Z,p),r.createElement(o.Z,{className:"container--t-margin-sm"},r.createElement(i.Z,{title:u("Report a Security Issue"),content:r.createElement("p",{className:"t3"},"At Web3 Foundation (W3F) we encourage responsible security investigation and reporting."),asideTitle:"See Also",asideContent:r.createElement(r.Fragment,null,r.createElement("ul",null,r.createElement("li",null,r.createElement(c.r,{stretched:!0,to:"https://security.parity.io/bug-bounties/"},"Polkadot bug bounty")),r.createElement("li",null,r.createElement(c.r,{stretched:!0,to:"https://polkadot.antiscam.team/contact/"},"Antiscam collective"))))})),r.createElement(o.Z,{className:"container--b-margin-md"},r.createElement("div",{className:"t-text t-max-width"},r.createElement("h2",{className:"t-title-2"},"What to Report"),r.createElement("p",null,"Contact us if you have discovered security issues in W3F programs, services, servers, network, or infrastructure."),r.createElement("p",null,r.createElement("i",null,"Out of Scope:")," W3F websites"),r.createElement("h2",{className:"t-title-2"},"How to report"),r.createElement("p",null,"To report a security issue, send an email to"," ",r.createElement("a",{href:"mailto:[email protected]",className:"o-link-bold",target:"_blank",rel:"nofollow noopener noreferrer"},"[email protected]")," ","with a description of the issue, including:"),r.createElement("ul",{className:""},r.createElement("li",null,"Description of the issueâs potential impact"),r.createElement("li",null,"The affected resource, e.g. URL, GitHub repo, transaction"),r.createElement("li",null,"A proof-of-concept that demonstrates the issue, if applicable")),r.createElement("p",null,"Our PGP public key is available ",r.createElement(c.r,{to:"/pgp.asc"},"here"),"."),r.createElement("h2",{className:"t-title-2"},"Our process"),r.createElement("p",null,"Upon receiving your report, we will evaluate the issue and may reach out to ask for additional information and/or provide you with our assessment. Any reported security issues may be eligible for rewards, depending on their novelty and/or the severity of their impact. Payment of any reward is at the sole and absolute discretion of W3F."))))}},3492:function(e,t,a){"use strict";a.d(t,{Z:function(){return i}});var r=a(7294),n=a(8442),l=a(2585),s=a(2967),o=a(1739),i=function(e){var t=e.title,a=e.ctaLink,i=e.content,c=e.asideTitle,m=e.asideContent,u=e.delayedAside,d=void 0===u||u;return r.createElement(n.df,{className:(0,l.Z)("hero")},r.createElement("div",{className:"hero-body a-fade-up-and-in"},r.createElement("h1",{className:(0,l.Z)("hero-body__title t-title-1 a-fade-up-from-bottom")},t),r.createElement("div",{className:"hero-body__content t-xl"},i),a&&r.createElement(o.Z,{className:"hero-body__cta-link",to:a.url},a.title)),m&&c&&r.createElement("div",{className:(0,l.Z)("hero__aside a-fade-up-from-bottom"),style:(0,n.H8)(d?4:0)},r.createElement(s.Z,{title:c,content:m})))}},1739:function(e,t,a){"use strict";a.d(t,{Z:function(){return m}});var r=a(3366),n=a(7294),l=a(2585),s=a(6192),o=a(6641),i=a.n(o),c=["to","children","reversed","stretched","className"],m=function(e){var t=e.to,a=e.children,o=e.reversed,m=e.stretched,u=void 0!==m&&m,d=e.className,p=(0,r.Z)(e,c);return n.createElement(s.r,Object.assign({className:(0,l.Z)("arrow-link t-sm",d,o?"arrow-link--reversed":"arrow-link--default",{"arrow-link--stretched":u}),to:t},p),a," ",n.createElement(i(),{className:"arrow-link__icon"}))}},2967:function(e,t,a){"use strict";a.d(t,{Z:function(){return n}});var r=a(7294),n=function(e){var t=e.title,a=e.content;return r.createElement("aside",{className:"aside"},r.createElement("h3",{className:"aside__title t-bold"},t),r.createElement("div",{className:"t-text t-sm aside__content"},a))}},6641:function(e,t,a){var r=a(7294);function n(e){return r.createElement("svg",e,r.createElement("polygon",{fill:"currentColor",points:"25,3.4 24.3,4.1 28.9,8.7 1.8,8.7 1.8,9.7 28.9,9.7 24.3,14.3 25,15 30.9,9.2"}))}n.defaultProps={version:"1.1",id:"Layer_1",x:"0px",y:"0px",viewBox:"0 0 32.6 18.4",xmlSpace:"preserve"},e.exports=n,n.default=n}}]); 2//# sourceMappingURL=component---plugins-security-report-src-pages-security-report-js-c47f6879ff8f4e8e11d2.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.