Merge branch 'issue-17959' into 'rails'

hall of fame

See merge request sutty/sutty!288

public/.well-known/hall-of-fame.txt

@@ -0,0 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+# === Hall of Fame ===
+#
+# This is a list of very awesome and friendly hackers who have reported
+# security issues in git-shortlog format.
+
+Parth Narula (3):
+  Hyperlink Injection https://0xacab.org/sutty/sutty/-/issues/17494
+  Email Flooding Vulnerability https://0xacab.org/sutty/sutty/-/issues/17493
+  Missing MTA-STS https://0xacab.org/sutty/sutty.nl/-/commit/e506a3f3fedb46979894f4d9dab665723d855a50
+
+Sakil Hasan Saikat (1):
+  Exposed yarn.lock File Leading to Potential Information Disclosure https://0xacab.org/sutty/sutty/-/issues/18071
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYKAB0WIQRb/QhO+qrWre3YhiVzWVgylXkBZQUCZ2mhQAAKCRBzWVgylXkB
+ZQSAAP449kcjD8wD97UifD98xwXxxiOINwuu7congn4haEuFIgEA8Xz+qLBHU2g2
+ybXZP+lER0kV2dVexCDrbWbVT8kPJA4=
+=PEVU
+-----END PGP SIGNATURE-----

public/.well-known/pgp.asc

@@ -1,13 +1,13 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mDMEXuIuxxYJKwYBBAHaRw8BAQdAx7++TG7xSYPtEC7cALkX2bQkIsPdiPjA1NW6
-KyZIXjS0GFN1dHR5IDxzdXR0eUByaXNldXAubmV0PoiQBBMWCgA4FiEEODcdZeeQ
-ThO24WEhhg0wFh4HfXEFAl7iLscCGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AA
-CgkQhg0wFh4HfXHewQEA7PIVXSrXapCqz+bBypFHeowtiqi8PCJeaueeDWN7+1AB
-AKerQ/C56DiSpwCdNDvlleuRlhk3TedStnZOZw83T4UDuDgEXuIuxxIKKwYBBAGX
-VQEFAQEHQGl8Q/uPz3VwWPpAS6KJLZI27caqsgG416mSrbU54YQ1AwEIB4h4BBgW
-CgAgFiEEODcdZeeQThO24WEhhg0wFh4HfXEFAl7iLscCGwwACgkQhg0wFh4HfXHM
-CAEA5Lw718/jYN1DztG8/mGI3E7le19NSjdkc00p8VBESpcBAL4bNmVKqPZa14/D
-eu2uHSY1XcLpdUjD+eq0KjGpG90M
-=X71f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+=njjL
 -----END PGP PUBLIC KEY BLOCK-----

public/.well-known/security.txt

@@ -5,12 +5,11 @@ Contact: sutty+security@riseup.net
 Encryption: https://panel.sutty.nl/.well-known/pgp.asc
 Preferred-Languages: es,en
 Canonical: https://panel.sutty.nl/.well-known/security.txt
+Acknowledgments: https://panel.sutty.nl/.well-known/hall-of-fame.txt
 -----BEGIN PGP SIGNATURE-----
 
-iNUEARYKAH0WIQQ4Nx1l55BOE7bhYSGGDTAWHgd9cQUCX7WQZV8UgAAAAAAuAChp
-c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0Mzgz
-NzFENjVFNzkwNEUxM0I2RTE2MTIxODYwRDMwMTYxRTA3N0Q3MQAKCRCGDTAWHgd9
-cTBjAP9CxBiGyhkGdtcv1uUUZEG2Oq3RdYjr6fGbVDQt7YidBQD/U4pyDz+dwkZZ
-0+YAA9Hst0RqOwJpLh5yPGCVIdhGLgE=
-=CxQY
+iHUEARYKAB0WIQRb/QhO+qrWre3YhiVzWVgylXkBZQUCZ2mTkQAKCRBzWVgylXkB
+ZYI7AP9rROT5tInVlfjt1sTIYpEqO7H6IVWt6gBC2YkcaS5mvgEA1tIi9FZ2vT4F
+WTPg+c5FxXku+uggUQCYPhTeG8RWJwE=
+=4vAv
 -----END PGP SIGNATURE-----