{"action":"created","comment":{"url":"https://api.github.com/repos/mozilla/bedrock/pulls/comments/32036664","id":32036664,"diff_hunk":"@@ -0,0 +1,50 @@\n+{% extends \"security/base.html\" %}\n+\n+{% block page_title %}Mozilla Security Bug Bounty Program{% endblock %}\n+{% set body_id = \"bug-bounty\" %}\n+\n+{% block article %}\n+  <article class=\"section-content\" itemscope itemtype=\"http://schema.org/Article\">\n+    <header>\n+      <h1 itemprop=\"name\" class=\"title-shadow-box\">Web and Services Bug Bounty Program</h1>\n+    </header>\n+    <div itemprop=\"articleBody\">\n+      <h2>Introduction</h2>\n+\n+      <p>The Mozilla Web Application Security Bug Bounty Program is designed to encourage security research in Mozilla websites and services  and to reward those who help us protect Mozilla users data.</p>\n+\n+      <h2>General Bounty Guidelines</h2>\n+\n+      <p>Mozilla will pay a bounty for certain website and service security bugs,  as detailed below.  All security bugs must follow the following general criteria to be eligible:</p>\n+      <ul>\n+        <li>Security bug must be original and previously unreported.</li>\n+\n+        <li>Security bug must be a remote exploit, compromise user data, allow access to Mozilla infrastructure or resources, or easily manipulate a user.</li>\n+\n+        <li>Submitter must not be the author of the buggy code nor otherwise involved in its contribution to the Mozilla project (such as by providing check-in reviews).</li>\n+\n+        <li>Employees of the Mozilla Foundation and its subsidiaries are ineligible.</li>\n+      </ul>\n+      <p>If two or more people report the bug together, or working independently at approximately the same time, the reward will be divided between them.</p>\n+\n+      <h2>Reward Guidelines</h2>\n+\n+      <p>Mozilla will pay a bounty for website and service  security bugs as detailed below. All security bugs must follow the following general criteria to be eligible:</p>\n+      <ul>\n+        <li>Eligible security bugs may be present in any of eligible sites or services as outlined <a href=\"{{ url('security.bug-bounty.faq-webapp') }}\">here</a></li>\n+        <li>The security rating given by Bounty Committee for a bug must be \"sec-critical\", \"sec-high\" or \"sec-moderate\" in order for it to be eligible for a bounty. (See <a href=\"https://wiki.mozilla.org/WebAppSec/Web_App_Severity_Ratings\">Web App Ratings</a> for details of the rating qualifications.)</li>","path":"bedrock/security/templates/security/web-bug-bounty.html","position":35,"original_position":35,"commit_id":"9a14f00fe9ae68aa63bd542dd71fb49f813eb203","original_commit_id":"77fcce9667fe959af8d99eaa304edba6b518b9a0","user":{"login":"jpetto","id":317532,"avatar_url":"https://avatars.githubusercontent.com/u/317532?v=3","gravatar_id":"","url":"https://api.github.com/users/jpetto","html_url":"https://github.com/jpetto","followers_url":"https://api.github.com/users/jpetto/followers","following_url":"https://api.github.com/users/jpetto/following{/other_user}","gists_url":"https://api.github.com/users/jpetto/gists{/gist_id}","starred_url":"https://api.github.com/users/jpetto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jpetto/subscriptions","organizations_url":"https://api.github.com/users/jpetto/orgs","repos_url":"https://api.github.com/users/jpetto/repos","events_url":"https://api.github.com/users/jpetto/events{/privacy}","received_events_url":"https://api.github.com/users/jpetto/received_events","type":"User","site_admin":false},"body":"Still need to update this line?","created_at":"2015-06-09T17:01:32Z","updated_at":"2015-06-09T17:01:32Z","html_url":"https://github.com/mozilla/bedrock/pull/3044#discussion_r32036664","pull_request_url":"https://api.github.com/repos/mozilla/bedrock/pulls/3044","_links":{"self":{"href":"https://api.github.com/repos/mozilla/bedrock/pulls/comments/32036664"},"html":{"href":"https://github.com/mozilla/bedrock/pull/3044#discussion_r32036664"},"pull_request":{"href":"https://api.github.com/repos/mozilla/bedrock/pulls/3044"}}},"pull_request":{"url":"https://api.github.com/repos/mozilla/bedrock/pulls/3044","id":37079614,"html_url":"https://github.com/mozilla/bedrock/pull/3044","diff_url":"https://github.com/mozilla/bedrock/pull/3044.diff","patch_url":"https://github.com/mozilla/bedrock/pull/3044.patch","issue_url":"https://api.github.com/repos/mozilla/bedrock/issues/3044","number":3044,"state":"open","locked":false,"title":"Updating bug bounty pages with changes to program","user":{"login":"rforbes","id":1017508,"avatar_url":"https://avatars.githubusercontent.com/u/1017508?v=3","gravatar_id":"","url":"https://api.github.com/users/rforbes","html_url":"https://github.com/rforbes","followers_url":"https://api.github.com/users/rforbes/followers","following_url":"https://api.github.com/users/rforbes/following{/other_user}","gists_url":"https://api.github.com/users/rforbes/gists{/gist_id}","starred_url":"https://api.github.com/users/rforbes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rforbes/subscriptions","organizations_url":"https://api.github.com/users/rforbes/orgs","repos_url":"https://api.github.com/users/rforbes/repos","events_url":"https://api.github.com/users/rforbes/events{/privacy}","received_events_url":"https://api.github.com/users/rforbes/received_events","type":"User","site_admin":false},"body":"I have added a couple new pages and expanded the pages to the current bug bounty program. This includes new payouts, links to the hall of fame, and clarification on requirements.","created_at":"2015-06-05T23:49:09Z","updated_at":"2015-06-09T17:01:32Z","closed_at":null,"merged_at":null,"merge_commit_sha":"3bade023c926eba7214a1cd4e8758224255b11b8","assignee":{"login":"jpetto","id":317532,"avatar_url":"https://avatars.githubusercontent.com/u/317532?v=3","gravatar_id":"","url":"https://api.github.com/users/jpetto","html_url":"https://github.com/jpetto","followers_url":"https://api.github.com/users/jpetto/followers","following_url":"https://api.github.com/users/jpetto/following{/other_user}","gists_url":"https://api.github.com/users/jpetto/gists{/gist_id}","starred_url":"https://api.github.com/users/jpetto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jpetto/subscriptions","organizations_url":"https://api.github.com/users/jpetto/orgs","repos_url":"https://api.github.com/users/jpetto/repos","events_url":"https://api.github.com/users/jpetto/events{/privacy}","received_events_url":"https://api.github.com/users/jpetto/received_events","type":"User","site_admin":false},"milestone":null,"commits_url":"https://api.github.com/repos/mozilla/bedrock/pulls/3044/commits","review_comments_url":"https://api.github.com/repos/mozilla/bedrock/pulls/3044/comments","review_comment_url":"https://api.github.com/repos/mozilla/bedrock/pulls/comments{/number}","comments_url":"https://api.github.com/repos/mozilla/bedrock/issues/3044/comments","statuses_url":"https://api.github.com/repos/mozilla/bedrock/statuses/9a14f00fe9ae68aa63bd542dd71fb49f813eb203","head":{"label":"rforbes:security-branch","ref":"security-branch","sha":"9a14f00fe9ae68aa63bd542dd71fb49f813eb203","user":{"login":"rforbes","id":1017508,"avatar_url":"https://avatars.githubusercontent.com/u/1017508?v=3","gravatar_id":"","url":"https://api.github.com/users/rforbes","html_url":"https://github.com/rforbes","followers_url":"https://api.github.com/users/rforbes/followers","following_url":"https://api.github.com/users/rforbes/following{/other_user}","gists_url":"https://api.github.com/users/rforbes/gists{/gist_id}","starred_url":"https://api.github.com/users/rforbes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rforbes/subscriptions","organizations_url":"https://api.github.com/users/rforbes/orgs","repos_url":"https://api.github.com/users/rforbes/repos","events_url":"https://api.github.com/users/rforbes/events{/privacy}","received_events_url":"https://api.github.com/users/rforbes/received_events","type":"User","site_admin":false},"repo":{"id":35200919,"name":"bedrock","full_name":"rforbes/bedrock","owner":{"login":"rforbes","id":1017508,"avatar_url":"https://avatars.githubusercontent.com/u/1017508?v=3","gravatar_id":"","url":"https://api.github.com/users/rforbes","html_url":"https://github.com/rforbes","followers_url":"https://api.github.com/users/rforbes/followers","following_url":"https://api.github.com/users/rforbes/following{/other_user}","gists_url":"https://api.github.com/users/rforbes/gists{/gist_id}","starred_url":"https://api.github.com/users/rforbes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rforbes/subscriptions","organizations_url":"https://api.github.com/users/rforbes/orgs","repos_url":"https://api.github.com/users/rforbes/repos","events_url":"https://api.github.com/users/rforbes/events{/privacy}","received_events_url":"https://api.github.com/users/rforbes/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/rforbes/bedrock","description":"Making mozilla.org awesome, one pebble at a time","fork":true,"url":"https://api.github.com/repos/rforbes/bedrock","forks_url":"https://api.github.com/repos/rforbes/bedrock/forks","keys_url":"https://api.github.com/repos/rforbes/bedrock/keys{/key_id}","collaborators_url":"https://api.github.com/repos/rforbes/bedrock/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/rforbes/bedrock/teams","hooks_url":"https://api.github.com/repos/rforbes/bedrock/hooks","issue_events_url":"https://api.github.com/repos/rforbes/bedrock/issues/events{/number}","events_url":"https://api.github.com/repos/rforbes/bedrock/events","assignees_url":"https://api.github.com/repos/rforbes/bedrock/assignees{/user}","branches_url":"https://api.github.com/repos/rforbes/bedrock/branches{/branch}","tags_url":"https://api.github.com/repos/rforbes/bedrock/tags","blobs_url":"https://api.github.com/repos/rforbes/bedrock/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/rforbes/bedrock/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/rforbes/bedrock/git/refs{/sha}","trees_url":"https://api.github.com/repos/rforbes/bedrock/git/trees{/sha}","statuses_url":"https://api.github.com/repos/rforbes/bedrock/statuses/{sha}","languages_url":"https://api.github.com/repos/rforbes/bedrock/languages","stargazers_url":"https://api.github.com/repos/rforbes/bedrock/stargazers","contributors_url":"https://api.github.com/repos/rforbes/bedrock/contributors","subscribers_url":"https://api.github.com/repos/rforbes/bedrock/subscribers","subscription_url":"https://api.github.com/repos/rforbes/bedrock/subscription","commits_url":"https://api.github.com/repos/rforbes/bedrock/commits{/sha}","git_commits_url":"https://api.github.com/repos/rforbes/bedrock/git/commits{/sha}","comments_url":"https://api.github.com/repos/rforbes/bedrock/comments{/number}","issue_comment_url":"https://api.github.com/repos/rforbes/bedrock/issues/comments{/number}","contents_url":"https://api.github.com/repos/rforbes/bedrock/contents/{+path}","compare_url":"https://api.github.com/repos/rforbes/bedrock/compare/{base}...{head}","merges_url":"https://api.github.com/repos/rforbes/bedrock/merges","archive_url":"https://api.github.com/repos/rforbes/bedrock/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/rforbes/bedrock/downloads","issues_url":"https://api.github.com/repos/rforbes/bedrock/issues{/number}","pulls_url":"https://api.github.com/repos/rforbes/bedrock/pulls{/number}","milestones_url":"https://api.github.com/repos/rforbes/bedrock/milestones{/number}","notifications_url":"https://api.github.com/repos/rforbes/bedrock/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/rforbes/bedrock/labels{/name}","releases_url":"https://api.github.com/repos/rforbes/bedrock/releases{/id}","created_at":"2015-05-07T05:39:24Z","updated_at":"2015-05-07T05:39:32Z","pushed_at":"2015-06-09T16:52:06Z","git_url":"git://github.com/rforbes/bedrock.git","ssh_url":"git@github.com:rforbes/bedrock.git","clone_url":"https://github.com/rforbes/bedrock.git","svn_url":"https://github.com/rforbes/bedrock","homepage":"https://www.mozilla.org","size":313949,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"mozilla:master","ref":"master","sha":"68374fee1dccbd68c42c3bc3e7b652473313deca","user":{"login":"mozilla","id":131524,"avatar_url":"https://avatars.githubusercontent.com/u/131524?v=3","gravatar_id":"","url":"https://api.github.com/users/mozilla","html_url":"https://github.com/mozilla","followers_url":"https://api.github.com/users/mozilla/followers","following_url":"https://api.github.com/users/mozilla/following{/other_user}","gists_url":"https://api.github.com/users/mozilla/gists{/gist_id}","starred_url":"https://api.github.com/users/mozilla/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozilla/subscriptions","organizations_url":"https://api.github.com/users/mozilla/orgs","repos_url":"https://api.github.com/users/mozilla/repos","events_url":"https://api.github.com/users/mozilla/events{/privacy}","received_events_url":"https://api.github.com/users/mozilla/received_events","type":"Organization","site_admin":false},"repo":{"id":1616665,"name":"bedrock","full_name":"mozilla/bedrock","owner":{"login":"mozilla","id":131524,"avatar_url":"https://avatars.githubusercontent.com/u/131524?v=3","gravatar_id":"","url":"https://api.github.com/users/mozilla","html_url":"https://github.com/mozilla","followers_url":"https://api.github.com/users/mozilla/followers","following_url":"https://api.github.com/users/mozilla/following{/other_user}","gists_url":"https://api.github.com/users/mozilla/gists{/gist_id}","starred_url":"https://api.github.com/users/mozilla/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozilla/subscriptions","organizations_url":"https://api.github.com/users/mozilla/orgs","repos_url":"https://api.github.com/users/mozilla/repos","events_url":"https://api.github.com/users/mozilla/events{/privacy}","received_events_url":"https://api.github.com/users/mozilla/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/mozilla/bedrock","description":"Making mozilla.org awesome, one pebble at a time","fork":false,"url":"https://api.github.com/repos/mozilla/bedrock","forks_url":"https://api.github.com/repos/mozilla/bedrock/forks","keys_url":"https://api.github.com/repos/mozilla/bedrock/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mozilla/bedrock/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mozilla/bedrock/teams","hooks_url":"https://api.github.com/repos/mozilla/bedrock/hooks","issue_events_url":"https://api.github.com/repos/mozilla/bedrock/issues/events{/number}","events_url":"https://api.github.com/repos/mozilla/bedrock/events","assignees_url":"https://api.github.com/repos/mozilla/bedrock/assignees{/user}","branches_url":"https://api.github.com/repos/mozilla/bedrock/branches{/branch}","tags_url":"https://api.github.com/repos/mozilla/bedrock/tags","blobs_url":"https://api.github.com/repos/mozilla/bedrock/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mozilla/bedrock/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mozilla/bedrock/git/refs{/sha}","trees_url":"https://api.github.com/repos/mozilla/bedrock/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mozilla/bedrock/statuses/{sha}","languages_url":"https://api.github.com/repos/mozilla/bedrock/languages","stargazers_url":"https://api.github.com/repos/mozilla/bedrock/stargazers","contributors_url":"https://api.github.com/repos/mozilla/bedrock/contributors","subscribers_url":"https://api.github.com/repos/mozilla/bedrock/subscribers","subscription_url":"https://api.github.com/repos/mozilla/bedrock/subscription","commits_url":"https://api.github.com/repos/mozilla/bedrock/commits{/sha}","git_commits_url":"https://api.github.com/repos/mozilla/bedrock/git/commits{/sha}","comments_url":"https://api.github.com/repos/mozilla/bedrock/comments{/number}","issue_comment_url":"https://api.github.com/repos/mozilla/bedrock/issues/comments{/number}","contents_url":"https://api.github.com/repos/mozilla/bedrock/contents/{+path}","compare_url":"https://api.github.com/repos/mozilla/bedrock/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mozilla/bedrock/merges","archive_url":"https://api.github.com/repos/mozilla/bedrock/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mozilla/bedrock/downloads","issues_url":"https://api.github.com/repos/mozilla/bedrock/issues{/number}","pulls_url":"https://api.github.com/repos/mozilla/bedrock/pulls{/number}","milestones_url":"https://api.github.com/repos/mozilla/bedrock/milestones{/number}","notifications_url":"https://api.github.com/repos/mozilla/bedrock/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mozilla/bedrock/labels{/name}","releases_url":"https://api.github.com/repos/mozilla/bedrock/releases{/id}","created_at":"2011-04-14T22:57:57Z","updated_at":"2015-06-08T14:27:33Z","pushed_at":"2015-06-09T16:52:08Z","git_url":"git://github.com/mozilla/bedrock.git","ssh_url":"git@github.com:mozilla/bedrock.git","clone_url":"https://github.com/mozilla/bedrock.git","svn_url":"https://github.com/mozilla/bedrock","homepage":"https://www.mozilla.org","size":352392,"stargazers_count":240,"watchers_count":240,"language":"HTML","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":334,"mirror_url":null,"open_issues_count":16,"forks":334,"open_issues":16,"watchers":240,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/mozilla/bedrock/pulls/3044"},"html":{"href":"https://github.com/mozilla/bedrock/pull/3044"},"issue":{"href":"https://api.github.com/repos/mozilla/bedrock/issues/3044"},"comments":{"href":"https://api.github.com/repos/mozilla/bedrock/issues/3044/comments"},"review_comments":{"href":"https://api.github.com/repos/mozilla/bedrock/pulls/3044/comments"},"review_comment":{"href":"https://api.github.com/repos/mozilla/bedrock/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/mozilla/bedrock/pulls/3044/commits"},"statuses":{"href":"https://api.github.com/repos/mozilla/bedrock/statuses/9a14f00fe9ae68aa63bd542dd71fb49f813eb203"}}}}