Skip to content

docs: add security policy (SECURITY.md)#56611

Open
srpatcha wants to merge 3 commits intofacebook:mainfrom
srpatcha:chore/add-security-policy
Open

docs: add security policy (SECURITY.md)#56611
srpatcha wants to merge 3 commits intofacebook:mainfrom
srpatcha:chore/add-security-policy

Conversation

@srpatcha
Copy link
Copy Markdown

@srpatcha srpatcha commented Apr 25, 2026

Summary

This PR adds a SECURITY.md policy and fixes W3C FileReader spec compliance.

Changelog

[General] [Fixed] - Add LOADING state guard, state transition, and loadstart event dispatch to FileReader per W3C spec
[General] [Added] - Add ResizeObserver polyfill for Web API compatibility

Test Plan

Jest tests added for ResizeObserver polyfill covering observation scheduling, entry creation, callback batching, and disconnect cleanup.

Add security policy for responsible vulnerability disclosure
via Facebook's Bug Bounty program.
@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Apr 25, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 25, 2026

Caution

Missing Changelog

Please add a Changelog to your PR description. See Changelog format

@facebook-github-tools facebook-github-tools Bot added the Shared with Meta Applied via automation to indicate that an Issue or Pull Request has been shared with the team. label Apr 25, 2026
srpatcha and others added 2 commits April 24, 2026 22:09
FileReader was missing LOADING state guard (should throw
InvalidStateError if already reading per W3C spec), state transition
to LOADING before async read, and loadstart event dispatch. Added
all three to comply with the W3C FileReader specification.

Signed-off-by: Srikanth Patchava <spatchava@meta.com>
Signed-off-by: Srikanth Patchava <srikanth.patchava@outlook.com>
…d batching

- Implement ResizeObserver class following Web API spec
- Add ResizeObserverEntry for size change reporting
- Support observation scheduling via requestAnimationFrame
- Add callback batching for performance
- Include disconnect and unobserve cleanup
- Support multiple element observation
- Add box size calculation utilities with fractional pixel fix
- Add comprehensive Jest tests

Bug-fix: Fix fractional pixel rounding in element size calculations
Signed-off-by: Srikanth Patchava <spatchava@meta.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. p: Facebook Partner: Facebook Partner Shared with Meta Applied via automation to indicate that an Issue or Pull Request has been shared with the team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant