Report a security problem

Found a way to break in, break something, or see what you shouldn't? Please tell us before anyone else.

How

Email bruno@poweredbycode.com.br with what you found, how to reproduce it, and what it lets someone do. We'll answer within a few days and keep you posted until it's fixed.

Please

• Test only with accounts and projects that are yours, and stop once you've shown the problem.
• Don't read, change or delete other people's data, and don't degrade the site for others (no floods or load tests).
• Give us a reasonable time to fix it before you publish anything.

If you act in good faith along these lines, we won't pursue you, and we'll thank you publicly (if you'd like) once it's fixed. There's no paid bounty for now.

In scope

themapofprojects.com: the map, project and stack pages, submitting, sign-in, votes and the curator area. Not in scope: the projects listed on the map (report those to their makers), or reports from automated scanners without a demonstrated problem.

Machine-readable: /.well-known/security.txt.