Download the PHP package magenxcommerce/module-securitytxt without Composer
On this page you can find all versions of the php package magenxcommerce/module-securitytxt. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download magenxcommerce/module-securitytxt
More information about magenxcommerce/module-securitytxt
Files in magenxcommerce/module-securitytxt
Package module-securitytxt
Short Description Security.txt file for Magento 2 websites
License OSL-3.0 AFL-3.0
Informations about the package module-securitytxt
Security.txt
Summary
When security vulnerabilities are discovered by researchers, proper reporting channels are often lacking. As a result, vulnerabilities may be left unreported. This document defines a format ("security.txt") to help organizations describe their vulnerability disclosure practices to make it easier for researchers to report vulnerabilities.
Source: https://tools.ietf.org/html/draft-foudil-securitytxt-09
The Magento_Securitytxt module provides the following functionality:
- allows to save the security configurations in the admin panel
- contains a router to match application action class for requests to the
.well-known/security.txt
and.well-known/security.txt.sig
files. - serves the content of the
.well-known/security.txt
and.well-known/security.txt.sig
files.
A valid security.txt file could look like the following example:
Security.txt can be accessed at below location:
https://example.com/.well-known/security.txt
To create security.txt signature (security.txt.sig) file:
gpg -u KEYID --output security.txt.sig --armor --detach-sig security.txt
To verify the security.txt file's signature:
gpg --verify security.txt.sig security.txt
All versions of module-securitytxt with dependencies
magenxcommerce/framework Version *
magenxcommerce/module-config Version *
magenxcommerce/module-store Version *