c32427d0c1
Daniel Stenberg
2026-06-05
Subject
VULN-DISCLOSURE-POLICY.md: emphasize comm as a human
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
docs/VULN-DISCLOSURE-POLICY.md+7 -0
| @@ -36,6 +36,13 @@ announcement. | |
| [HackerOne](https://hackerone.com/curl). Issues filed there reach a handful | |
| of selected and trusted people. | |
| + | - When communicating in the curl project, please explain your issues or |
| + | improvements briefly and clearly in your own human voice. Do not lazily |
| + | paste massive, AI-generated explanations; as a contributor doing this |
| + | infrequently, it is your responsibility to invest a few extra minutes into |
| + | making your message digestible. The maintainers review submissions |
| + | constantly, and clear writing reduces their daily burden and friction. |
| + | |
| - The curl project cannot handle vulnerability reports sent to us over email. | |
| We lose track of the reports. We cannot easily disclose them. Please do not | |
| send us reports over email. | |