8000 added more info to pausing new reports and option to receive crits · joshbrandy/docs.hackerone.com@d8a0cca · GitHub
[go: up one dir, main page]

Skip to content

Commit d8a0cca

Browse files
committed
added more info to pausing new reports and option to receive crits
1 parent e7495e8 commit d8a0cca

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

docs/programs/submit-report-form.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,19 @@ One of the most important elements of running a successful bug bounty campaign i
1111
### Customizing the Report Submissions Form Page
1212
To customize your report submissions form page:
1313
1. Go to **Program Settings > Program > Submit Report Form**.
14-
2. Toggle **Yes** or **No** for whether you want your program to accept new report submissions or not.
14+
2. Toggle **Yes** or **No** for these options:
15+
16+
Option | Details
17+
------ | -------
18+
Accepting new report submissions | Set to **Yes** if you'd like to receive new report submissions. <br><br>Set to **No** to stop receiving new reports. A good time to stop receiving new reports is if you're behind with triaging and responding to the current reports you've received. You can pause in receiving new reports to catch up with your current reports.
19+
Accepting critical report submissions even when not accepting new reports | Even if you're not accepting new report submissions, hackers can still submit new reports if they find critical vulnerabilities in your program. Set to **Yes** if you're currently paused in receiving new report submissions but still want to receive critical reports.
20+
1521
3. Edit these sections:
1622

1723
Section | Details
1824
------- | --------
1925
Introduction Text | This text is shown at the top of the report submissions page for hackers. You can: <br><ul><li>highlight important information from your policy and bounty eligibility</li><li>specify attributes of a good report</li><li>address frequently asked questions</li><li>provide any additional guidance for hackers</li></ul>
2026
Report Template | Configure the Markdown-based report template with the information you want hackers to provide. The template will be pre-populated with your requested fields when a hacker submits a new report. The more details you provide in the template, the more you ensure that hackers are providing you with all the information you need to verify and validate the report. <br> *Note: The template must be written in Markdown*.
21-
Weakness Configuration | A weakness is a type of mistake in software that introduces vulnerabilities within that software. All weaknesses are shown by default and are organized in clusters (a set of weaknesses). To edit vulnerability display preferences, click **Edit** and you can choose from these options: <br><ul><li>Show: Reports can be submitted. You can add a contextual message if you have extra instructions or information pertaining to the weakness. Hackers can see the extra instructions on the submission page after selection.</li><li>Hide: The weakness isn't shown on the submission page and is not available to be selected by hackers.</li><li>Disable: The weakness will be displayed, but reports with this weakness can't be submitted. This option is often used if there is a common weakness type you've decided to put out of scope and you wish to attach an explanation of why this weakness type is out of scope. </li></ul>
27+
Weakness Configuration | A we 40CF akness is a type of mistake in software that introduces vulnerabilities within that software. All weaknesses are shown by default and are organized in clusters (a set of weaknesses). To edit vulnerability display preferences, click **Edit** and you can choose from these options: <br><ul><li>Show: Reports can be submitted. You can add a contextual message if you have extra instructions or information pertaining to the weakness. Hackers can see the extra instructions on the submission page after selection.</li><li>Hide: The weakness isn't shown on the submission page and is not available to be selected by hackers.</li><li>Disable: The weakness will be displayed, but reports with this weakness can't be submitted. This option is often used if there is a common weakness type you've decided to put out of scope and you wish to attach an explanation of why this weakness type is out of scope. </li></ul>
2228

2329
4. Click **Update introduction and template**.

0 commit comments

Comments
 (0)
0