mirror of
https://github.com/dev993848/lastochka-messenger.git
synced 2026-05-23 13:45:50 +00:00
Anton Budylin
d266606297
- lastochka-server: removed nested .git, now browsable on GitHub - lastochka-ios: removed nested .git, now browsable on GitHub - lastochka-android: added (Kotlin + Jetpack Compose) - lastochka-desktop: added (Electron + React) - lastochka-android-compose: removed (replaced by lastochka-android) - lastochka-ui: updated to latest prototype - .gitignore: added .gradle/, Pods/, DerivedData/, local.properties Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
664 B
664 B
Security Policy
Reporting a Vulnerability
Please report a vulnerability to security@tinode.co.
Do NOT to report:
- Firebase initialization tokens. The Firebase tokens are really public: they must be distributed with the client applications and consequently are not private by design.
- Exposed
/pprofand/or/expvar. We know they are exposed. It's intentional and harmless. - Exposed Prometheus metrics
/metrics. Like above, it's intentional and harmless. - DMARC policy is not enabled
p=none. We know and that's the way we like it for now. - Weak cipher suites (TLS 1.0) at
*.tinode.co. Yes, we know. Does not look serious/important.