really-simple-ssl
Last commit date
assets
4 weeks ago
core
4 weeks ago
languages
4 weeks ago
lets-encrypt
4 weeks ago
lib
4 weeks ago
mailer
4 weeks ago
modal
4 weeks ago
placeholders
4 weeks ago
progress
4 weeks ago
security
4 weeks ago
settings
4 weeks ago
testssl
4 weeks ago
upgrade
4 weeks ago
.wp-env.json
4 weeks ago
SECURITY.md
4 weeks ago
class-admin.php
4 weeks ago
class-cache.php
4 weeks ago
class-certificate.php
4 weeks ago
class-front-end.php
4 weeks ago
class-installer.php
4 weeks ago
class-mixed-content-fixer.php
4 weeks ago
class-multisite.php
4 weeks ago
class-server.php
4 weeks ago
class-site-health.php
4 weeks ago
class-wp-cli.php
4 weeks ago
compatibility.php
4 weeks ago
force-deactivate.txt
4 weeks ago
functions.php
4 weeks ago
index.php
4 weeks ago
readme.txt
4 weeks ago
rector.php
4 weeks ago
rlrsssl-really-simple-ssl.php
4 weeks ago
rsssl-auto-loader.php
4 weeks ago
sbom.json.gz
4 weeks ago
ssl-test-page.php
4 weeks ago
system-status.php
4 weeks ago
uninstall.php
4 weeks ago
upgrade.php
4 weeks ago
SECURITY.md
28 lines
| 1 | # Security Policy |
| 2 | |
| 3 | The security of our software products is essential to us and our customers. In spite of our care, procedures and best efforts it is possible that there are vulnerabilities in our software products. If you find any, please tell us as soon as possible so we can fix them. |
| 4 | |
| 5 | ## Reporting a Vulnerability |
| 6 | |
| 7 | To report a security issue, please [](mailto:security@really-simple-ssl.comemail us](mailto:security@really-simple-ssl.com](mailto:security@really-simple-ssl.com) with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue. |
| 8 | Please read our [](https://really-simple-ssl.com/coordinated-vulnerability-disclosure-policy/Coordinated Vulnerability Disclosure Policy](https://really-simple-ssl.com/coordinated-vulnerability-disclosure-policy/](https://really-simple-ssl.com/coordinated-vulnerability-disclosure-policy/) before reporting any vulnerabilities. |
| 9 | |
| 10 | ## Preferred languages: |
| 11 | en, nl |
| 12 | |
| 13 | ## Software Bill of Materials (SBOM) |
| 14 | |
| 15 | This software includes a comprehensive Software Bill of Materials (SBOM) listing all dependencies. |
| 16 | |
| 17 | **SBOM file:** |
| 18 | - `sbom.json.gz` - Compressed SBOM file |
| 19 | - Extract with: `gunzip sbom.json.gz` |
| 20 | |
| 21 | **Format:** CycloneDX JSON v1.5 |
| 22 | **Contents:** All direct and transitive dependencies from PHP (Composer) and JavaScript (npm) packages |
| 23 | |
| 24 | To extract and view the compressed SBOM: |
| 25 | ```bash |
| 26 | gunzip sbom.json.gz |
| 27 | cat sbom.json | jq . |
| 28 | ``` |