Skip to content

Security: jjaspreetsingh/jjaspreetsingh.github.io

Security

SECURITY.md

Security Policy

Supported Versions

This is a static website hosted on GitHub Pages. All versions are currently supported with security updates.

Version Supported
Latest

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly.

How to Report

  1. Do NOT open a public GitHub issue for security vulnerabilities
  2. Email security concerns to: [Your Email Address]
  3. Include the following information:
    • Description of the vulnerability
    • Steps to reproduce (if applicable)
    • Potential impact
    • Suggested fix (if you have one)

Response Timeline

  • Initial Response: Within 48 hours
  • Status Update: Within 7 days
  • Resolution: Depends on severity and complexity

What to Expect

  • Acknowledgment of your report
  • Regular updates on the status of the vulnerability
  • Credit for the discovery (if desired)
  • Notification when the vulnerability is fixed

Security Best Practices

This is a static website with no server-side processing. However, please note:

  • All user interactions are client-side only
  • No sensitive data is collected or stored
  • External links open in new tabs for security
  • Theme preferences are stored locally in browser localStorage only

Scope

In Scope

  • Security vulnerabilities in the website code
  • XSS vulnerabilities
  • Privacy concerns
  • Broken authentication/authorization (if applicable)

Out of Scope

  • Issues with GitHub Pages hosting
  • Issues with external services (GitHub, LinkedIn, etc.)
  • Social engineering attacks
  • Physical security issues

Disclosure Policy

We follow responsible disclosure practices:

  • Vulnerabilities will be fixed before public disclosure
  • Security researchers will be credited (if desired)
  • Public disclosure will occur after a fix is available

Thank you for helping keep this project secure!

There aren’t any published security advisories