From: Michael Tremer Date: Thu, 25 Sep 2025 16:23:20 +0000 (+0000) Subject: Add security.txt X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d9b9d075372d3a34cc9cf03499fe3844f9d06540;p=ipfire.org.git Add security.txt Signed-off-by: Michael Tremer --- diff --git a/Makefile.am b/Makefile.am index 1b1415cc..b94d2b96 100644 --- a/Makefile.am +++ b/Makefile.am @@ -393,6 +393,7 @@ CLEANFILES += \ static_DATA = \ src/static/favicon.ico \ src/static/robots.txt \ + src/static/security.txt \ src/sass/listing.css \ src/sass/public-inbox.css \ src/sass/main.css diff --git a/src/static/security.txt b/src/static/security.txt new file mode 100644 index 00000000..3d0f1441 --- /dev/null +++ b/src/static/security.txt @@ -0,0 +1,4 @@ +Contact: mailto:security@ipfire.org +Expires: 2035-12-31T23:59:00.000Z +Preferred-Languages: en +Policy: https://www.ipfire.org/docs/devel/security-policy diff --git a/src/web/__init__.py b/src/web/__init__.py index 7fd663aa..b3d45f71 100644 --- a/src/web/__init__.py +++ b/src/web/__init__.py @@ -242,6 +242,9 @@ class Application(tornado.web.Application): (r"/api/check/email", auth.APICheckEmail), (r"/api/check/uid", auth.APICheckUID), + # security.txt + (r"/\.well\-known/security\.txt", tornado.web.RedirectHandler, { "url" : "/static/security.txt" }), + # Handle old pages that have moved elsewhere (r"/blog/authors/(\w+)", tornado.web.RedirectHandler, { "url" : "/users/{0}" }), (r"/donation", tornado.web.RedirectHandler, { "url" : "/donate" }),