wpdev
1a50ab20b8
Baseline before backporting wp-data-optimizer v3.0.1-v3.4.6. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TbG1keQQ7XBa7qMQY16KCY
37 lines
642 B
Markdown
37 lines
642 B
Markdown
# Security Policy
|
||
|
||
## Supported versions
|
||
|
||
| Version | Supported |
|
||
|---|:-:|
|
||
| 0.1.x | ✅ |
|
||
|
||
---
|
||
|
||
## Reporting a vulnerability
|
||
|
||
請參考核心外掛 [SECURITY.md](../2meet-data-optimizer/SECURITY.md)。
|
||
|
||
簡述：
|
||
- Email: security@2meet.io
|
||
- 請勿在 public GitHub issue 揭露
|
||
- 24h 內初步回應、7 天內提供修補時程
|
||
|
||
---
|
||
|
||
## 安全設計
|
||
|
||
本 AddOn 完全遵守 2meet-data-optimizer 核心安全設計：
|
||
|
||
- SQL prepared statements
|
||
- Capability check (`manage_options`)
|
||
- Nonce 驗證
|
||
- Output escaping
|
||
- 反序列化走 `TMDO_Safe_Unserialize`
|
||
|
||
---
|
||
|
||
## 已知 Risk
|
||
|
||
- (本版本暫無已知安全 risk；Phase 4 ship 時補)
|