From 9cfc380f402aec03dc0337c4eb2724d2a17b75ff Mon Sep 17 00:00:00 2001 From: kobihikri Date: Tue, 14 Jul 2026 12:26:07 +0300 Subject: [PATCH] Add /.well-known/security.txt (RFC 9116) The site serves no security.txt at the well-known location, so a researcher following RFC 9116 has no machine-discoverable pointer to the project's security-reporting process. This adds one (served from the static directory). Signed-off-by: kobihikri --- static/.well-known/security.txt | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 static/.well-known/security.txt diff --git a/static/.well-known/security.txt b/static/.well-known/security.txt new file mode 100644 index 000000000000..93071d204732 --- /dev/null +++ b/static/.well-known/security.txt @@ -0,0 +1,4 @@ +Contact: https://github.com/gofiber/fiber/security/advisories/new +Expires: 2027-07-14T00:00:00.000Z +Preferred-Languages: en +Canonical: https://docs.gofiber.io/.well-known/security.txt