From 727b00855ee691a96b7f97793bb86b42a5834fde Mon Sep 17 00:00:00 2001
From: Erb3 <49862976+Erb3@users.noreply.github.com>
Date: Thu, 22 Aug 2024 17:30:32 +0200
Subject: [PATCH] feat: add security.txt

Security.txt is a well-known (pun intended) file among security researchers, so they don't have to go scavenging for your security information. More information is available on [securitytxt.org](https://securitytxt.org/).

I've set the following values:

- The email to contact with issues, `jai@modrinth.com`. This is the email stated in the security policy. If you wish to not include it here due to spam, you should also not have it as a `mailto` link in the security policy.
- Expiry is set to 2030. By this time Modrinth has become the biggest Minecraft mod distributor, and having expanded into other games. By this time they should also have updated this file.
- English is the preferred language
- The file is located at modrinth.com/.well-known/security.txt
- The security policy is at https://modrinth.com/legal/security

The following values have been left unset:

- PGP key, not sure where this would be located, if there is one
- Acknowledgments. Modrinth does currently not have a site for thanks
- Hiring, as it wants security-related positions
- CSAF, a Common Security Advisory Framework ?
---
 apps/frontend/src/public/.well-known/security.txt | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 apps/frontend/src/public/.well-known/security.txt

diff --git a/apps/frontend/src/public/.well-known/security.txt b/apps/frontend/src/public/.well-known/security.txt
new file mode 100644
index 000000000..12b44e712
--- /dev/null
+++ b/apps/frontend/src/public/.well-known/security.txt
@@ -0,0 +1,5 @@
+Contact: mailto:jai@modrinth.com
+Expires: 2030-01-01T00:00:00.000Z
+Preferred-Languages: en
+Canonical: https://modrinth.com/.well-known/security.txt
+Policy: https://modrinth.com/legal/security