Report security vulnerabilities in private. A public GitHub issue, discussion, or pull request is public disclosure.

Use Report a vulnerability on the security advisories page:

https://github.com/openframeworks/ofSite/security/advisories/new

If you cannot use that form, email of at openFrameworks [.cc].

This policy covers the openFrameworks website, the Nikola site in this repository, and the build and deploy scripts.

Report a vulnerability in openFrameworks itself through the openFrameworks security policy. Report a vulnerability in the project generator through the projectGenerator security policy.

Please include:

• the page or script, and whether you saw it on openframeworks.cc or in this repository
• what the issue is, and what the impact is
• steps to reproduce, or a proof of concept, when you have one

Maintainers will confirm the report on the advisory and coordinate a fix before publishing it.

The published site is built from master. Please report against master or the live site at https://openframeworks.cc/. Fixes are committed to master.