From 0d0cb3bb6249c32a048f3cae93953db5a0551bd0 Mon Sep 17 00:00:00 2001 From: Brian Anderson Date: Fri, 6 Nov 2015 14:05:19 -0800 Subject: [PATCH] Direct security bugs to the security policy. --- CONTRIBUTING.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 515e6e18f70..a11e9a7d680 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -34,6 +34,9 @@ While bugs are unfortunate, they're a reality in software. We can't fix what we don't know about, so please report liberally. If you're not sure if something is a bug or not, feel free to file a bug anyway. +**If you believe reporting your bug publicly represents a security risk to Rust users, +please follow our [instructions for reporting security vulnerabilities](https://www.rust-lang.org/security.html)**. + If you have the chance, before reporting a bug, please [search existing issues](https://github.com/rust-lang/rust/search?q=&type=Issues&utf8=%E2%9C%93), as it's possible that someone else has already reported your error. This doesn't