Gatsby Plugin security.txt
security.txt is a proposed standard for websites to define security policies (github.com)What is security.txt
When security risks in web services are discovered by independent security researchers who understand the severity of the risk, they often lack the channels to disclose them properly. As a result, security issues may be communicated on inappropriate channels or left unreported.
security.txt is an Internet draft standard, submitted for RFC review, to help website owners define the process for security researchers to disclose security vulnerabilities securely. The information is provided on standard path /.well-known/security.txt
A few real-world implementation examples of security.txt
- https://www.bbc.com/.well-known/security.txt
- https://www.theguardian.com/.well-known/security.txt
- https://www.google.com/.well-known/security.txt
- https://www.npmjs.com/.well-known/security.txt
- https://www.facebook.com/.well-known/security.txt
- https://www.raiffeisen.ch/.well-known/security.txt
Gatsby plugin
Gatsby plugin "gatsby-plugin-security-txt" creates a text file called security.txt under the .well-known directory (see RFC5785) of your project on every Gatsby build.
The security.txt syntax follows specifications of the excellent https://securitytxt.org/
The plugin is
- versioned at GitHub: https://github.com/Vacilando/gatsby-plugin-security-txt
- available from npm: https://www.npmjs.com/package/gatsby-plugin-security-txt
- listed at the Gatsby Plugin Library: https://www.gatsbyjs.org/packages/gatsby-plugin-security-txt/
If you like this work please give it a star or sponsor it at GitHub!
Sint-Agatha-Berchem, Belgium
February 10, 2020, February 24, 2020, February 25, 2020, February 26, 2020
- Gatsby & Drupal: In Quest of an Ideal Coupling
- Gatsby Wikipedia Fetcher
- Using CDN to Accelerate Drupal API Sourcing for GatsbyJS
- Gatsby Plugin Pocket API
- https://securitytxt.org/
- https://en.wikipedia.org/wiki/Security.txt
- https://www.bleepingcomputer.com/news/security/security-txt-standard-proposed-similar-to-robots-txt/
- https://www.michalspacek.com/what-is-security.txt-and-why-you-should-have-one
ENGLISH ARTICLEOCTOBER 20, 2018 AT 01:46:40 UTC