{
    "document": {
        "page": "security",
        "title": "Reporting a security problem",
        "version": 1,
        "reviewed": false,
        "blocks": [
            {
                "type": "paragraph",
                "level": null,
                "text": "If you think you've found a security problem in Stackapella, please tell us at the address in our security.txt (stackapella.com/.well-known/security.txt). We read every report.",
                "items": null
            },
            {
                "type": "heading",
                "level": 2,
                "text": "What helps",
                "items": null
            },
            {
                "type": "list",
                "level": null,
                "text": null,
                "items": [
                    "What you found, and where (the page or the request).",
                    "How to see it happen, step by step.",
                    "What someone could do with it."
                ]
            },
            {
                "type": "heading",
                "level": 2,
                "text": "What we ask",
                "items": null
            },
            {
                "type": "list",
                "level": null,
                "text": null,
                "items": [
                    "Look only at your own account, or test accounts you made. Never at other people's recordings, messages or details.",
                    "Don't change or delete anything that isn't yours, and don't slow the service for others.",
                    "Give us a reasonable time to fix it before telling anyone else."
                ]
            },
            {
                "type": "heading",
                "level": 2,
                "text": "What we promise",
                "items": null
            },
            {
                "type": "list",
                "level": null,
                "text": null,
                "items": [
                    "We'll answer within 3 working days, and keep you posted until it's fixed.",
                    "We won't take action against anyone who reports in good faith and follows the above.",
                    "With your OK, we'll thank you by name on this page once it's fixed. There's no bounty for now."
                ]
            }
        ]
    }
}