Skip to content

Security: Mqtth3w/library-Telegram-bot

Security

SECURITY.md

Security Policy 📜

Important

Security guidelines

  • Never share your bot api key.
  • Never Share your secret token.
  • Never share your Cloudflare worker url. If someone know your worker url can impersonate you with fake requests to the worker (they should also know your secret token or brute force it), because your Telegram ID is not secret. If your worker url is not secret change it!

Tip

Certificate

Optionally, you can set up a self-signed certificate to enhance the security of the requests. For more datails check the following links: setWebhook and self-signed.

Note

Reporting a Vulnerability

Contact me here or use the Discussions section.

There aren’t any published security advisories