安全报告
帧定位器安全策略
最后更新: March 18, 2026
显示英文原文. 本政策文本目前以英文显示，正在准备经审核的本地化版本。
1. Reporting
Security issues should be reported privately through the designated reporting channel.
Please do not disclose vulnerabilities publicly before they are resolved.
2. Scope
The following areas are in scope for responsible disclosure.
- the Frame Localizer plugin
- the hosted backend service
- service-related data handling
3. Out of Scope
The following are not considered in scope for this policy.
- third-party services not operated by Frame Localizer
- external platform vulnerabilities
4. Handling Process
Reported issues are reviewed, prioritized, and addressed based on severity and impact.
We may coordinate disclosure after a fix has been deployed.
5. Submission Guidance
Private reports should include enough context for review.
For now, direct reports and follow-up questions to nowonly0816@gmail.com.
- description of the issue
- reproduction steps
- impact assessment
- additional details or proof of concept when available
私密报告
提交安全报告
通过这份表单提交的报告只会进入私密的安全审查队列。