This file describes how security issues are reported and handled, and what the expectations are for security issues reported to this project.

This project provides non-production-ready sample code implementations of IPP Clients, Printers, Proxies, and Systems.

Note: This code is provided for educational purposes only. While we make every effort to ensure the code is bug-free and regularly run the code through dynamic and static analysis tools, it is written for correctness, not performance, and so is not intended for use or supported as a production solution. This code is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

Security bugs in the ["libcups"][LIBCUPS] and ["libcups/pdfio"][PDFIO] directories should be reported using the security policies for those projects.

Security bugs in the "server" and "tools" directories should be reported to the GitHub issue tracker at https://github.com/istopwg/ippsample/issues. We do not request CVEs for security issues nor will security organizations issue CVEs for security bugs since this project only contains non-production-ready sample code.