darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-08 08:28:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

investigate security.txt

Browse Source
This commit is contained in:
Kenneth Kehl
2024-10-16 07:48:00 -07:00
parent 34ccfb5bd7
commit ae0f8d58d9
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/.well-known/security.txt Normal file
View File

@@ -0,0 +1,2 @@
Contact: mailto:security@notify.gov
Expires: 2025-10-15T23:59:59Z

6
app/main/views/security_policy.py
View File

@@ -1,4 +1,4 @@
from flask import redirect from flask import send_from_directory
from app.main import main from app.main import main
@@ -6,6 +6,4 @@ from app.main import main
@main.route("/.well-known/security.txt", methods=["GET"]) @main.route("/.well-known/security.txt", methods=["GET"])
@main.route("/security.txt", methods=["GET"]) @main.route("/security.txt", methods=["GET"])
def security_policy(): def security_policy():
# See GDS Way security policy which this implements return send_from_directory(".well-known", "security.txt")
# https://gds-way.cloudapps.digital/standards/vulnerability-disclosure.html#vulnerability-disclosure-and-security-txt
return redirect("https://vdp.cabinetoffice.gov.uk/.well-known/security.txt")