This project is still in its early stages, although the only functional part is essentially a set of basic web and database query programs. They were tested via Khan Academy, and likely don't have much issue.

For general security vulnerabilities, use the security label and start your issue title with [SECURITY]. Remember to not publicly post critical/zero day vulnerabilities, see more on this below.

If somehow my Khan Academy account info is cracked, be a good Samaritan and not post the information publicly.

DO NOT REPORT A ZERO DAY VULNERABILITY PUBLICLY!

Please instead direct message me via GitHub. If there is no response within 90 days, you can post the vulnerability as an issue, as part of the standard 0 day security exploit reporting guidelines.

If a vulnerability is caused by an outdated dependancy, you can report it publicly, as it usually isn't that much of a problem.

If account vulnerability is found, please do not disclose the information publicly.

Dependency problems aren't very bad. This project uses 5 different languages:

• HTML5

• CSS3

• JavaScript 1.8

• SQL

You can still report dependency problems, but dependencies usually won't be updated unless they get too old (5+ years before the most recent release) or they aren't common enough to download anymore. The current dependencies this project has include:

• CSS 3.0 (although the program will still run with any version of CSS prior to CSS 2.0 as of 2021 October 28th at 8:00 pm)

• JavaScript 1.8 (bumping the version up or down a little bit shouldn't be harmful, just test it first.)

• SQL ? (unknown SQL version)

Other security info currently isn't available. If there are any further questions, @ me privately on GitHub. @seanpm2001

File type: Markdown document (*.md *.mkd *.mdown *.markdown)

File purpose: Lying out the security policy for this project.

File version: 1 (2021, Monday, November 1st at 9:13 pm)

File language: English (US)

Line count (including blank lines and compiler line): 187

All times are UTC-7 (PDT/Pacific Time)

You may need special rendering support for the <dropdown> HTML tag being used in this document

Encoding: UTF-8 (with no non-US-ASCII characters)

Version 1 (2021, Monday, November 1st at 9:13 pm)

Changes:

• Started the file

• Added the supported versions section

• Added the version history section

• Added the reporting a vulnerability section

• Added the file info section

• Added the file history section

• No other changes in version 1

Version 2 (Coming soon)

Changes:

• Coming soon

• No other changes in version 2