Make form.web.bounty stop adding the bounty flag and more strongly push people to HackerOne
Categories
(bugzilla.mozilla.org :: Custom Bug Entry Forms, task)
Tracking
()
People
(Reporter: dveditz, Assigned: dveditz)
Details
Attachments
(1 file)
We have fully migrated our web bug bounty program to HackerOne and need to update form.web.bounty accordingly
- stop adding the sec-bounty? flag
- more strongly indicate it's the wrong place to file bounty bugs
- update the message to explicitly say that bugs using the form will NOT be part of the bounty program
We're not ready to kill the form entirely because the link is out there and we don't want link rot. Keeping the form lets us point those folks to H1 directly rather than a 404 sending them back to a crap-filled search engines. It keeps the form around in case we do ever move the bounty program back, and for some people maybe it's a simple way to file web security bugs and make sure the security team sees it and the bugs are appropriately hidden.
|
||
Comment 1•14 days ago
|
||
|
|
||
Comment 2•13 days ago
|
||
Authored by https://github.com/dveditz
https://github.com/mozilla-bteam/bmo/commit/78a8a774d64ea4c4446dad7b7fb64ff8e8dce0b6
[master] bug 2051396: form.web.bounty should not add the sec-bounty? flag
Description
•