summaryrefslogtreecommitdiffstats
path: root/mobile/android/fenix/SECURITY.md
diff options
context:
space:
mode:
Diffstat (limited to 'mobile/android/fenix/SECURITY.md')
-rw-r--r--mobile/android/fenix/SECURITY.md5
1 files changed, 5 insertions, 0 deletions
diff --git a/mobile/android/fenix/SECURITY.md b/mobile/android/fenix/SECURITY.md
new file mode 100644
index 0000000000..7c259dd46a
--- /dev/null
+++ b/mobile/android/fenix/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Report all security vunerablites to [Bugzilla Fenix::Security](https://bugzilla.mozilla.org/enter_bug.cgi?product=Fenix&component=Security). If they are not a security bug you will be asked to move your report to [Fenix GitHub](https://github.com/mozilla-mobile/fenix/issues). See the [Mozilla Security Bug Bounty Program](https://www.mozilla.org/en-US/security/bug-bounty/) and the [client security reporting](https://www.mozilla.org/en-US/security/client-bug-bounty/) pages for details. In any case where this document and the Mozilla.org pages differ the Mozilla.org pages are the official documentation.