really-simple-ssl
Last commit date
assets
9 months ago
languages
8 months ago
lets-encrypt
9 months ago
lib
1 year ago
mailer
10 months ago
modal
9 months ago
onboarding
10 months ago
placeholders
9 months ago
progress
1 year ago
security
8 months ago
settings
9 months ago
testssl
5 years ago
upgrade
9 months ago
.wp-env.json
10 months ago
SECURITY.md
9 months ago
class-admin.php
9 months ago
class-cache.php
2 years ago
class-certificate.php
2 years ago
class-front-end.php
1 year ago
class-installer.php
10 months ago
class-mixed-content-fixer.php
3 years ago
class-multisite.php
1 year ago
class-server.php
1 year ago
class-site-health.php
1 year ago
class-wp-cli.php
11 months ago
compatibility.php
1 year ago
force-deactivate.txt
1 year ago
functions.php
10 months ago
index.php
2 years ago
readme.txt
8 months ago
rector.php
1 year ago
rlrsssl-really-simple-ssl.php
8 months ago
rsssl-auto-loader.php
1 year ago
sbom.json.gz
8 months ago
ssl-test-page.php
2 years ago
system-status.php
9 months ago
uninstall.php
9 months ago
upgrade.php
9 months ago
SECURITY.md
28 lines
| 1 | # Security Policy |
| 2 | |
| 3 | The security of our software products is essential to us and our customers. In spite of our care, procedures and best efforts it is possible that there are vulnerabilities in our software products. If you find any, please tell us as soon as possible so we can fix them. |
| 4 | |
| 5 | ## Reporting a Vulnerability |
| 6 | |
| 7 | To report a security issue, please [](mailto:security@really-simple-ssl.comemail us](mailto:security@really-simple-ssl.com](mailto:security@really-simple-ssl.com) with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue. |
| 8 | Please read our [](https://really-simple-ssl.com/coordinated-vulnerability-disclosure-policy/Coordinated Vulnerability Disclosure Policy](https://really-simple-ssl.com/coordinated-vulnerability-disclosure-policy/](https://really-simple-ssl.com/coordinated-vulnerability-disclosure-policy/) before reporting any vulnerabilities. |
| 9 | |
| 10 | ## Preferred languages: |
| 11 | en, nl |
| 12 | |
| 13 | ## Software Bill of Materials (SBOM) |
| 14 | |
| 15 | This software includes a comprehensive Software Bill of Materials (SBOM) listing all dependencies. |
| 16 | |
| 17 | **SBOM file:** |
| 18 | - `sbom.json.gz` - Compressed SBOM file |
| 19 | - Extract with: `gunzip sbom.json.gz` |
| 20 | |
| 21 | **Format:** CycloneDX JSON v1.5 |
| 22 | **Contents:** All direct and transitive dependencies from PHP (Composer) and JavaScript (npm) packages |
| 23 | |
| 24 | To extract and view the compressed SBOM: |
| 25 | ```bash |
| 26 | gunzip sbom.json.gz |
| 27 | cat sbom.json | jq . |
| 28 | ``` |