Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,32 @@
# Security Policy

## Supported Versions

The OWASP Nest project follows a rolling release model.
Only the latest version on the `main` branch is actively supported with security updates.

## Reporting a Vulnerability

If you discover a security vulnerability in OWASP Nest, please report it responsibly.

### How to Report

Please use this [form](https://github.com/OWASP/Nest/security/advisories/new) to report a security vulnerability.
Please **do not** create public GitHub issues for security-related reports.

### What to Include

When reporting a vulnerability, please include:

- A clear description of the issue
- Steps to reproduce (if applicable)
- Potential impact
- Any relevant logs or screenshots

## Response Timeline

- Initial acknowledgment: **up to 7 days**
- Investigation and validation: **up to 14 days** depending on the issue severity
- Fix and coordinated disclosure thereafter

Thank you for helping keep OWASP Nest and the community secure.
6 changes: 3 additions & 3 deletions frontend/jest.setup.ts
Original file line number Diff line number Diff line change
Expand Up @@ -114,9 +114,9 @@ beforeAll(() => {
}

globalThis.ResizeObserver = class {
disconnect() {} // NOSONAR: empty mock implementation for test environment.
observe() {} // NOSONAR: empty mock implementation for test environment.
unobserve() {} // NOSONAR: empty mock implementation for test environment.
disconnect = jest.fn()
observe = jest.fn()
unobserve = jest.fn()
}
})

Expand Down
3 changes: 2 additions & 1 deletion frontend/src/components/Footer.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,8 @@ export default function Footer() {
<Button
disableAnimation
onPress={() => toggleSection(section.title)}
className="flex w-full items-center justify-between bg-transparent pl-0 text-left text-lg font-semibold focus:ring-slate-400 focus:outline-hidden lg:cursor-default"
className="flex w-full items-center justify-between bg-transparent pl-0 text-left text-lg font-semibold focus:ring-slate-400 focus-visible:outline focus-visible:outline-2 focus-visible:outline-slate-500
"
aria-expanded={openSection === section.title}
aria-controls={`footer-section-${section.title}`}
>
Expand Down