We are at *twenty* hackerone submissions so for #curl far this year. Zero of them a confirmed vulnerability.
Discussion
Loading...
@bagder Wasn’t 📈exponential growth📈 what every project was hoping to achieve?!
Maybe it should be mandatory that the HackerOne submission must be done with `curl -X PUT … `, including BearerTokens/OAuth etc?
@bagder that screams for a new graph: "average number of hackerone submissions to the curl project per day". :)
@jpmens I foolish thought *per year* would be the appropriate time frame: https://curl.se/dashboard1.html#hackerone (the graph hasn't updated yet)
@bagder Shld I submit a #hackerone submission for #curl, identifying hackerone as a DoS attack vector for the project, recommending depreciation?