diff --git a/.github/SECURITY.md b/.github/SECURITY.md index d607a3f80..b1c56dd88 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -1,8 +1,12 @@ # Security report -If you find security-related vulnerabilities, please inform us in any of the following ways: +If you find security-related vulnerabilities, please create a Security Advisories: -* Open Issue directly (please hide sensitive information such as site and actual project) -* Send an email to 845765@qq.com +https://github.com/siyuan-note/siyuan/security/advisories/new + +Some areas we don't consider security vulnerabilities: + +* Arbitrary file write: Writing files outside the workspace path (e.g., exporting files) is a common user need +* SQL injection Thank you very much!