diff options
author | Reilly Chase <rchase@rchase.com> | 2016-11-04 19:09:38 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2016-11-04 19:09:38 +0300 |
commit | 07498731956476a409a4467b09c26685d257e058 (patch) | |
tree | 2913c0b7b19daac4159b05a4fc6db26a8dd050d8 /page-security.php | |
parent | 2386e2e04373bc7b3e1bd5b3e79312cc92c7c3ed (diff) |
page-security.php spelling fix
Diffstat (limited to 'page-security.php')
-rw-r--r-- | page-security.php | 83 |
1 files changed, 56 insertions, 27 deletions
diff --git a/page-security.php b/page-security.php index 5bffa616..f1c271f5 100644 --- a/page-security.php +++ b/page-security.php @@ -1,51 +1,80 @@ <?php get_template_part( 'templates/parts/title'); ?> -<div class="sub-nav"><a href="/security/advisories"><?php
echo $l->t('Security Advisories');?></a> | <a href="/security/threat-model"><?php
echo $l->t('Threat Model');?></a> +<div class="sub-nav"><a href="/security/advisories"><?php + echo $l->t('Security Advisories');?></a> | <a href="/security/threat-model"><?php + echo $l->t('Threat Model');?></a> </div> -<h2><?php
echo $l->t('Security information');?></h2> -<p><?php
echo $l->t('This page hosts our security policies and information with regards to reporting security flaws. Learn more about how Nextcloud offers the <a href="/secure">best security in the open source file sync and share industry here</a>. You can');?> <a href="<?php echo get_template_directory_uri(); ?>/advisories/advisories.rss"><?php
echo $l->t('follow our advisories via RSS</a>.');?></p> -<p><?php
echo $l->t('For server owners, our documentation has a section with <a href="<?php echo $DOCUMENTATION_ADMIN; ?>configuration_server/harden_server.html" target="_blank">best practices and tips on securing a Nextcloud server</a>.');?></p> +<h2><?php + echo $l->t('Security information');?></h2> +<p><?php + echo $l->t('This page hosts our security policies and information with regards to reporting security flaws. Learn more about how Nextcloud offers the <a href="/secure">best security in the open source file sync and share industry here</a>. You can');?> <a href="<?php echo get_template_directory_uri(); ?>/advisories/advisories.rss"><?php + echo $l->t('follow our advisories via RSS</a>.');?></p> +<p><?php + echo $l->t('For server owners, our documentation has a section with <a href="<?php echo $DOCUMENTATION_ADMIN; ?>configuration_server/harden_server.html" target="_blank">best practices and tips on securing a Nextcloud server</a>.');?></p> <div class="row"> <div class="span12"> - <p><?php
echo $l->t('If you have discovered a security issue with Nextcloud, please read our responsible disclosure guidelines and contact us at <a href="https://hackerone.com/nextcloud"><strong>hackerone.com/nextcloud</strong></a>. Your report should include:');?></p> + <p><?php + echo $l->t('If you have discovered a security issue with Nextcloud, please read our responsible disclosure guidelines and contact us at <a href="https://hackerone.com/nextcloud"><strong>hackerone.com/nextcloud</strong></a>. Your report should include:');?></p> <ul> - <li><?php
echo $l->t('Product version');?></li> - <li><?php
echo $l->t('A vulnerability description');?></li> - <li><?php
echo $l->t('Reproduction steps');?></li> + <li><?php + echo $l->t('Product version');?></li> + <li><?php + echo $l->t('A vulnerability description');?></li> + <li><?php + echo $l->t('Reproduction steps');?></li> </ul> - <p><?php
echo $l->t('A member of the security team will confirm the vulnerability, determine its impact, and develop a fix. The fix will be applied to the master branch, tested, and packaged in the next security release. The vulnerability will be publicly announced after the release. Finally, your name will be added to the <a href="https://hackerone.com/nextcloud/thanks">hall of fame</a> as a thank you from the entire Nextcloud community. Note our <a href="/security/threat-model">threat model</a> to know what is expected behavior.');?></p> + <p><?php + echo $l->t('A member of the security team will confirm the vulnerability, determine its impact, and develop a fix. The fix will be applied to the master branch, tested, and packaged in the next security release. The vulnerability will be publicly announced after the release. Finally, your name will be added to the <a href="https://hackerone.com/nextcloud/thanks">hall of fame</a> as a thank you from the entire Nextcloud community. Note our <a href="/security/threat-model">threat model</a> to know what is expected behavior.');?></p> - <h3><?php
echo $l->t('PGP Key for Submissions');?></h3> - <p><?php
echo $l->t('In order to facilitate secure submission of security issues, we provide the <a href="https://pgp.mit.edu/pks/lookup?op=get&search=0xD75899B9A724937A">following PGP key</a> for confidential submission:');?></p> + <h3><?php + echo $l->t('PGP Key for Submissions');?></h3> + <p><?php + echo $l->t('In order to facilitate secure submission of security issues, we provide the <a href="https://pgp.mit.edu/pks/lookup?op=get&search=0xD75899B9A724937A">following PGP key</a> for confidential submission:');?></p> <ul> - <li><?php
echo $l->t('Key ID: <code>A724937A</code> + <li><?php + echo $l->t('Key ID: <code>A724937A</code> ');?></li> - <li><?php
echo $l->t('Fingerprint: <code>2880 6A87 8AE4 23A2 8372 792E D758 99B9 A724 937A</code> + <li><?php + echo $l->t('Fingerprint: <code>2880 6A87 8AE4 23A2 8372 792E D758 99B9 A724 937A</code> ');?></li> </ul> - <p><?php
echo $l->t('We do however recommend to not encrypt the information submitted via HackerOne as only a small subset of the team has access to this key.');?></p> + <p><?php + echo $l->t('We do however recommend to not encrypt the information submitted via HackerOne as only a small subset of the team has access to this key.');?></p> - <h3><?php
echo $l->t('Responsible Disclosure Guidelines');?></h3> - <p><?php
echo $l->t('The Nextcloud community kindly requests that you comply with the following guidelines when researching and reporting security vulnerabilities:');?></p> + <h3><?php + echo $l->t('Responsible Disclosure Guidelines');?></h3> + <p><?php + echo $l->t('The Nextcloud community kindly requests that you comply with the following guidelines when researching and reporting security vulnerabilities:');?></p> <ul> - <li><?php
echo $l->t('Only test for vulnerabilities on your own install of Nextcloud Server');?></li> - <li><?php
echo $l->t('Confirm the vulnerability applies to a supported product version');?></li> - <li><?php
echo $l->t('Share vulnerabilities in detail only with the security team');?></li> - <li><?php
echo $l->t('Allow reasonable time for a response from the security team');?></li> - <li><?php
echo $l->t('Do not publish information related to the vulnerability until Nextcloud has made an announcement to the community');?></li> + <li><?php + echo $l->t('Only test for vulnerabilities on your own install of Nextcloud Server');?></li> + <li><?php + echo $l->t('Confirm the vulnerability applies to a supported product version');?></li> + <li><?php + echo $l->t('Share vulnerabilities in detail only with the security team');?></li> + <li><?php + echo $l->t('Allow reasonable time for a response from the security team');?></li> + <li><?php + echo $l->t('Do not publish information related to the vulnerability until Nextcloud has made an announcement to the community');?></li> </ul> - <h3><?php
echo $l->t('Supported Product Versions');?></h3> - <p><?php
echo $l->t('Nextcloud Server:');?></p> + <h3><?php + echo $l->t('Supported Product Versions');?></h3> + <p><?php + echo $l->t('Nextcloud Server:');?></p> <ul> - <li><?php
echo $l->t('Latest 10.x release');?></li> - <li><?php
echo $l->t('Latest 9.0.x release');?></li> + <li><?php + echo $l->t('Latest 10.x release');?></li> + <li><?php + echo $l->t('Latest 9.0.x release');?></li> </ul> - <p><?php
echo $l->t('extcloud Android Client:');?></p> + <p><?php + echo $l->t('Nextcloud Android Client:');?></p> <ul></p> - <li><?php
echo $l->t('Latest release on Google PlayStore');?></li> + <li><?php + echo $l->t('Latest release on Google PlayStore');?></li> </ul> </div> </div> |