From 72c544e45e0163da73ea9c2eac2a4224e43ad19b Mon Sep 17 00:00:00 2001 From: kobihikri Date: Tue, 14 Jul 2026 12:27:09 +0300 Subject: [PATCH] Add /.well-known/security.txt (RFC 9116) react-hook-form.com serves no security.txt at the well-known location, so a researcher following RFC 9116 has no machine-discoverable pointer to the project's security-reporting process. This adds one (served from public/). Signed-off-by: kobihikri --- public/.well-known/security.txt | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 public/.well-known/security.txt diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt new file mode 100644 index 000000000..d9080dbad --- /dev/null +++ b/public/.well-known/security.txt @@ -0,0 +1,5 @@ +Contact: https://github.com/react-hook-form/react-hook-form/security/advisories/new +Expires: 2027-07-14T00:00:00.000Z +Preferred-Languages: en +Canonical: https://react-hook-form.com/.well-known/security.txt +Policy: https://github.com/react-hook-form/react-hook-form/blob/master/SECURITY.md