-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bug Reporter: Add a link for reporting "Security Issues" to the information at the top #5567
Comments
Added a link to security page in bug reporter |
…rmation at the top YoYoGames/GameMaker-Bugs#5567 * Updated description and screenshot
Updated the screenshot and description on the manual page. |
Yup - confirmed the manual text now. I will file a separate issue that much of the bug reporter docs are on the main "Help Menu" page rather than on the actual page for the IDE bug reporter (and could do with a little bit of updating around not sending bugs via contact-us), but that's not a problem for this verification. |
Is your feature request related to a problem?
@iampremo suggested putting a feature request in for this after discussing it briefly.
As of 2024.400 the dropdown to privately report an issue in the IDE has been removed. I've only ever used this option once, but the usecase was to report a potential security issue I had found. The removal of this option is good for general bug reports - it makes sense that bugs and feature requests should be universally in the one public list - but for security issues it makes it a lot less obvious what the correct path should be for such issues.
I was pointed toward the Reporting Security Issues page, but the fact I hadn't known that existed until now means it should be more immediately accessible.
Describe the solution you'd like
With the option to privately submit a bug report gone, it might make sense to have a dedicated help menu item for reporting security issues. Alternatively, the existing reporter could have a "Security" dropdown option which would clarify that submitting in this category is done privately. Another option could be having a link on the reporter with text something like "Report a security issue" that links to the page earlier.
There's a bunch of different ways to approach it and the implementation is less of a concern in form, as long as the IDE provides a clear path to making this sort of report privately. Additionally, the private report option never provided any feedback - whatever form the solution will take should keep communication open so that the reporter can provide more details, or know that it is being addressed.
Hopefully such an option never has to be used! But having it there as clearly as possible means that such reports are openly encouraged, and should mean that security reports make their way through the intended processes to be addressed quickly and ensuring that they can be handled however necessary to the nature of the report.
The text was updated successfully, but these errors were encountered: