mirror of
https://github.com/stackblitz/bolt.new
synced 2025-06-26 18:17:50 +00:00
56f5d71e49
- Added .gitattributes to protect sensitive files - Added SECURITY.md with security policy and documentation - Enhanced repository protection Copyright (c) 2024 Ervin Remus Radosavlevici
54 lines
1.6 KiB
Markdown
54 lines
1.6 KiB
Markdown
# Security Policy
|
|
|
|
## Copyright Notice
|
|
|
|
Copyright (c) 2024 Ervin Remus Radosavlevici
|
|
All rights reserved.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
If you discover a security vulnerability within this project, please send an email to [security@example.com](mailto:security@example.com). All security vulnerabilities will be promptly addressed.
|
|
|
|
Please do not disclose security vulnerabilities publicly until they have been addressed by the maintainers.
|
|
|
|
## Security Features
|
|
|
|
This project implements several security features:
|
|
|
|
1. **Enhanced Encryption**
|
|
- AES-GCM encryption with authentication
|
|
- PBKDF2 key derivation with high iteration count
|
|
- Secure random salt generation
|
|
|
|
2. **Authentication System**
|
|
- Secure session management
|
|
- Protection against session hijacking
|
|
- Automatic session expiration
|
|
|
|
3. **Security Middleware**
|
|
- Content Security Policy headers
|
|
- Rate limiting to prevent brute force attacks
|
|
- XSS protection headers
|
|
|
|
4. **Secure Storage**
|
|
- Encrypted local storage
|
|
- Protection for sensitive data
|
|
|
|
5. **Input Validation**
|
|
- Sanitization to prevent XSS attacks
|
|
- Validation for common security threats
|
|
- Protection against SQL injection
|
|
|
|
## Best Practices
|
|
|
|
When contributing to this project, please follow these security best practices:
|
|
|
|
1. Never store sensitive information in client-side code
|
|
2. Always validate and sanitize user input
|
|
3. Use the provided security utilities for handling sensitive data
|
|
4. Follow the principle of least privilege
|
|
5. Keep dependencies updated to avoid security vulnerabilities
|
|
|
|
## License
|
|
|
|
This project is protected by copyright law. Unauthorized use, modification, or distribution is prohibited. |