Skip to content

SECURITY.md

Latest commit

 

History

History
16 lines (10 loc) · 585 Bytes

SECURITY.md

File metadata and controls

16 lines (10 loc) · 585 Bytes
Raw

Security Policy

Supported Versions

Security fixes are prepared for the latest tagged release and the main branch.

Reporting A Vulnerability

Report suspected vulnerabilities to info@makepay.io with enough detail to reproduce the issue. Please avoid public disclosure until the MakePay team has confirmed impact and prepared a fix.

Ruby Integration Rules

  • Keep MakePay API tokens on the server.
  • Verify webhooks using MakePay::Webhook.verify!.
  • Do not grant durable goods or mark orders paid from unsigned webhook payloads.
  • Use HTTPS for MakePay API traffic.