# Security contact for Meridiem
# https://securitytxt.org/

Contact: mailto:support@yourworldtime.com
Expires: 2027-01-15T00:00:00.000Z
Preferred-Languages: en
Canonical: https://meridiem.app/.well-known/security.txt
Policy: https://meridiem.app/terms/

# This is a static site with no backend, no database and no user accounts.
# The realistic attack surface is: the build's supply chain, the URL parameters
# the client-side tools parse, and the hosting configuration.
#
# Reports of the following are welcome and will be acted on:
#   - any way to get script execution on the origin
#   - any way to make the site emit a header or response it should not
#   - dependency compromise affecting the published artefact
#
# Out of scope: missing headers on third-party hosts, reports generated by an
# automated scanner with no demonstrated impact, and social engineering.