Security Policy - mattdrummond.ca
=================================

Scope
-----
This is a personal, static website. It has no logins, no forms, no
database and no user data. It is built with Hugo and hosted on GitHub
Pages. Reports are welcome for real, exploitable issues in content
served from www.mattdrummond.ca.

No bug bounty
-------------
There is no bug bounty, reward, swag or paid disclosure program. Please
do not ask for payment before or after sending a report.

Reporting
---------
Send reports to security@mattdrummond.ca with a clear description,
steps to reproduce and the affected URL. Please test only against
content you can see without authentication and do not degrade the
site for others.

Valid reports will be acknowledged and fixed. Good-faith research that
follows this policy will not be pursued legally.

Publication and credit
----------------------
By submitting a report, you consent to its publication. This includes
the contents of the report, any follow-up correspondence, and the name,
handle or organization you sent it under, which may be credited
publicly on this site in an acknowledgements page or similar. If you
do not agree to this, do not submit a report.