4 ms·
Hi Albertsons/Safeway VP of Security Engineering here. Thank you for disclosing this. I’ll have it fixed along with the fact our VDP submission link is missing
by iamhamm 3y ago
Hi Albertsons/Safeway VP of Security Engineering here. Thank you for disclosing this. I’ll have it fixed along with the fact our VDP submission link is missing from the Safeway site. Here it is for future reference https://albertsons.responsibledisclosure.com/hc/en-us https://albertsons.responsibledisclosure.com/hc/en-us
- alright2565 3y agoPlease also add a security.txt file so that it is not necessary to navigate through a labyrinthine site to get this information. https://datatracker.ietf.org/doc/html/rfc9116 https://datatracker.ietf.org/doc/html/rfc9116
- forward1 3y agoIt's definitely not fixed: the (likely malicious?) redirect still happens for me now. How embarassing (for you).
- pstuart 3y agoHi! I was wondering if it would get noticed here ;-) But as noted elsewhere, it's still not fixed. And the link you shared is a good thing but is that going to be easy to find to someone who sees an issue with your websites? I'd recommend putting a link here: https://www.safeway.com/help/contactus https://www.safeway.com/help/contactus
- pstuart 3y agoAs it's still not fixed, I tried the form there. It let me fill it out and send it in and then told me I needed to create an account, which made it appear that my submission wasn't sent. I've done enough here but ffs, if that form requires an account to be created beforehand then don't let the submitter go to the trouble of filling it out and then discard it.
- pstuart 3y agoEdit: my bad. Looks like browser cache was "helping out". Problem is resolved from my vantage point.