Security
If you find a vulnerability on this website, please tell us. We will work with you to fix it.
Scope
This website and its administration interface. Social engineering, physical attacks and denial of service are out of scope.
How to report
Email contact@intellidark.com with the steps to reproduce.
Please don’t access or change other people’s data, and give us reasonable time to fix the issue before disclosing it.
What to expect
An acknowledgement within 5 working days, then updates until the issue is fixed.
security.txt
How this site is built
The site loads no third-party scripts, fonts or trackers. These are the response headers it sends.
| Header | Value |
|---|---|
Content-Security-Policy | default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'; object-src 'none'; manifest-src 'self'; upgrade-insecure-requests; require-trusted-types-for 'script' |
Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |
X-Content-Type-Options | nosniff |
Referrer-Policy | strict-origin-when-cross-origin |
Permissions-Policy | accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=(), browsing-topics=() |
X-Frame-Options | DENY |
Cross-Origin-Opener-Policy | same-origin |
Cross-Origin-Resource-Policy | same-origin |
Cross-Origin-Embedder-Policy | require-corp |