Skip to content

Security: aWorlding1/pairrename-android

Security

SECURITY.md

Security Policy | 安全政策

Supported versions

Security fixes target the latest published release and source branch. Older builds may not receive fixes; obtain updates only from a source you trust, verify release checksums, and keep independent backups of important files.

Report a vulnerability privately

Please do not publish an unpatched vulnerability, exploit details, or private photographs in a public issue. Use GitHub's Report a vulnerability feature on this repository's Security tab. Include the affected version, Android version and storage provider, concise reproduction steps, impact, and redacted logs or a proof of concept.

If private reporting is unavailable, open a minimal issue asking for a private contact route—without exploit details. Please allow maintainers reasonable time to investigate before public disclosure; no response-time guarantee is implied.

Scope and safe handling

PairRename can rename, move, organize, or place selected files in its in-app trash. Test with copies, review operation plans, and retain independent backups. Undo, history, and in-app trash are not backups. Never send real photo libraries, signing keys, credentials, or unredacted personal data in a report.


中文

支持版本

安全修复优先面向最新公开 Release 和源码主分支。旧版本不一定继续获得修复;请只从可信来源更新、核对 Release 校验和,并独立备份重要文件。

私下报告安全问题

请勿在公开 Issue 中披露尚未修复的漏洞、利用细节或私人照片。请使用本仓库 Security 页中的 GitHub Report a vulnerability 私密报告入口,并说明受影响版本、Android 版本与存储提供方、简洁的复现步骤及影响;日志或验证材料请先脱敏。

如果无法私下报告,可只开一个简短 Issue 请求私密联系途径,不要附上利用细节。请给予维护者合理调查时间;本项目不承诺固定响应时限。

范围与数据保护

PairRename 可改名、移动和整理文件,也可能把选中文件放入应用内回收站。请先在副本上测试、检查操作方案并保留独立备份。「撤销」「历史」和应用内回收站都不能替代备份。报告中请勿发送真实照片库、签名密钥、凭据或未脱敏的个人信息。

There aren't any published security advisories