Merge pull request #10028 from MrPetovan/task/security.txt

Add security.txt file
This commit is contained in:
Michael Vogel 2021-03-10 17:14:23 +01:00 committed by GitHub
commit 2605cc1a8a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 53 additions and 0 deletions

9
security.txt Normal file
View File

@ -0,0 +1,9 @@
Contact: mailto:info@friendi.ca
Expires: Wed, 30 Jun 2021 23:59 +0000
Preferred-Languages: en
Canonical: https://git.friendi.ca/friendica/friendica/raw/branch/stable/security.txt
Policy: https://friendi.ca/security-policy/

View File

@ -0,0 +1,43 @@
<?php
/**
* @copyright Copyright (C) 2020, Friendica
*
* @license GNU AGPL version 3 or any later version
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see <https://www.gnu.org/licenses/>.
*
*/
namespace Friendica\Module\WellKnown;
use Friendica\BaseModule;
/**
* Standardized way of exposing metadata about the project security policy
* @see https://securitytxt.org
*/
class SecurityTxt extends BaseModule
{
public static function rawContent(array $parameters = [])
{
$name = 'security.txt';
$fp = fopen($name, 'rt');
header('Content-type: text/plain; charset=utf-8');
header("Content-Length: " . filesize($name));
fpassthru($fp);
exit;
}
}

View File

@ -44,6 +44,7 @@ return [
'/.well-known' => [
'/host-meta' => [Module\WellKnown\HostMeta::class, [R::GET]],
'/nodeinfo' => [Module\WellKnown\NodeInfo::class, [R::GET]],
'/security.txt' => [Module\WellKnown\SecurityTxt::class, [R::GET]],
'/webfinger' => [Module\Xrd::class, [R::GET]],
'/x-nodeinfo2' => [Module\NodeInfo210::class, [R::GET]],
'/x-social-relay' => [Module\WellKnown\XSocialRelay::class, [R::GET]],