diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..a1ebcaf71 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,54 @@ +# 🔒 Security Policy + +## 🛠 Supported Versions + +The table below lists the **supported versions** of MinePong that receive security updates. + +| Version | Supported? | +| ------- | ------------------ | +| 5.1.x | ✅ Actively Supported | +| 5.0.x | ❌ No Longer Supported | +| 4.0.x | ✅ Receiving Security Patches | +| < 4.0 | ❌ Deprecated | + +If you are using an **unsupported version**, we highly recommend **upgrading** to the latest stable release to ensure security and stability. + +## 🛡️ Reporting a Vulnerability + +We take **security issues** seriously. If you discover a vulnerability in **MinePong**, please follow these steps: + +1. **📩 Contact Us Privately** + - Report security vulnerabilities via **[tharunraman10@gmail.com]**. + - **DO NOT** disclose vulnerabilities publicly until a fix has been released. + +2. **📄 Provide Details** + - Describe the issue clearly (e.g., steps to reproduce, affected code, possible exploit). + - Mention the **version** affected. + - Include **proof-of-concept (if possible)** to help us verify the issue faster. + +3. **⏳ Response Time** + - You will receive an **initial acknowledgment** within **48 hours**. + - A **fix or mitigation plan** will be provided within **7-14 days**, depending on the severity. + +4. **🔒 Disclosure Policy** + - Once patched, vulnerabilities will be disclosed **responsibly**. + - Critical vulnerabilities will be disclosed **only after** a fix is available to avoid exploitation. + +## 🔑 Security Best Practices + +To keep your game secure, we recommend: + +✅ Always running the **latest version** of MinePong. +✅ Using secure **browser settings** and **HTTPS** when hosting the game. +✅ Avoiding **untrusted modifications** or third-party scripts. + +## 📢 Stay Updated + +For security **updates and announcements**, check: + +- **[GitHub Issues](https://github.com/tharun977/minepong/issues)** +- **[Official Releases](https://github.com/tharun977/minepong/releases)** + +--- + +If you have any **questions** or **security concerns**, feel free to reach out. Thank you for helping keep **MinePong** safe! 🛡️🎮