Re: Google Patch Rewards program

2019-12-29 Thread Robert Roskam
I've made some minor contributions to django-csp, and CSP is an active area of interest to me. Should I send out the proposal myself or work with the core team? On Saturday, December 21, 2019 at 12:51:11 PM UTC-5, Adam Johnson wrote: > > I just saw Google is expanding their Patch Rewards

Re: Google Patch Rewards program

2019-12-29 Thread Guido Vranken
Here's an idea, but you'll have to ask around if it's eligible for a patch reward. Some time ago I wrote fuzzers for Django, which have been running 24/7 on OSS-Fuzz since. Thanks to this fuzzer, a few DoS bugs were found [2] and it would likely have caught some historic DoS bugs. The current