chg: [core] Added security dot txt page (RFC 9116).

mosp/templates/security.txt

@@ -0,0 +1,16 @@
+# NC3 Security Contact
+
+Contact: opensource@nc3.lu
+https://github.com/NC3-LU/MOSP/security
+
+Last stable version this software always provides security updates.
+here will be no security patches for other releases (tagged or not).
+
+
+# Reporting a Vulnerability
+
+If you think you have found a potential security issue, do not open directly a public GitHub issue.
+Please email us. You can contact opensource@nc3.lu.
+
+You can also specify how you would like to be credited for your finding (commit message or release notes for the new release).
+We will respect your privacy and will only publicize your involvement if you grant us permission.

mosp/views/views.py

@@ -118,6 +118,12 @@ def robots():
     return render_template("robots.txt"), 200, {"Content-Type": "text/plain"}
 
 
+@current_app.route("/.well-known/security.txt", methods=["GET"])
+def security():
+    """security dot txt page (RFC 9116)."""
+    return render_template("security.txt"), 200, {"Content-Type": "text/plain"}
+
+
 @current_app.route("/objects.atom", methods=["GET"])
 def objects_atom():
     """Returns an ATOM feed with the recent updated objects."""