At EduXcel, we take security seriously. We appreciate your help in responsibly disclosing any security vulnerabilities you may find. To report a security issue, please follow these steps:
-
DO NOT open a public GitHub issue or discussion. Security issues must remain private until they are resolved.
-
Contact our security team by emailing us at [email protected]. Please provide a detailed description of the vulnerability and steps to reproduce it.
-
Our security team will acknowledge your email within 24 hours, and we will work with you to assess and resolve the issue promptly.
-
Once the issue is resolved, we will provide credit to the reporter if desired and release a security update as soon as possible.
EduXcel is a continuously evolving project. We encourage users to keep their installations up to date with the latest releases to benefit from the latest security fixes and enhancements.
Our platform employs the following security measures:
- Secure Sign-Up: User data is protected with state-of-the-art security measures.
- JWT Authentication: Ensures data privacy and user access control.
- Robust Error Handling: Provides users with clear and informative error messages.
- CORS Middleware: Handles Cross-Origin Resource Sharing for secure communication.
- Data Encryption: Sensitive data is encrypted to prevent unauthorized access.
We are committed to providing a safe and secure environment for our users. We appreciate the efforts of security researchers in helping us achieve this goal. In return, we promise:
- To respond promptly to your report.
- To notify you of the progress toward resolving the issue.
- To credit your contribution publicly if you choose to be acknowledged.
Your contributions to the security of EduXcel are highly valued. If you discover any security vulnerabilities, please follow the reporting process outlined above. Your assistance helps us maintain the highest level of security for our users.
Thank you for your commitment to security and for making EduXcel a safer place for all learners and instructors.
The EduXcel Security Team