Zur aktuellen Revision |
Details |
Letzte Änderung |
Log anzeigen
| RSS feed
| Revision |
Autor |
Zeilennr. |
Zeile |
| 148 |
lars |
1 |
# Security Policy
|
|
|
2 |
|
|
|
3 |
PHPUnit is a framework for writing as well as a commandline tool for running tests. Writing and running tests is a development-time activity. There is no reason why PHPUnit should be installed on a webserver.
|
|
|
4 |
|
|
|
5 |
**If you upload PHPUnit to a webserver then your deployment process is broken. On a more general note, if your `vendor` directory is publicly accessible on your webserver then your deployment process is also broken.**
|
|
|
6 |
|
|
|
7 |
Please note that if you upload PHPUnit to a webserver "bad things" may happen. [You have been warned.](https://thephp.cc/articles/phpunit-a-security-risk)
|
|
|
8 |
|
|
|
9 |
## Security Contact Information
|
|
|
10 |
|
|
|
11 |
After the above, if you still would like to report a security vulnerability, please email `sebastian@phpunit.de`.
|