| Version | Supported |
|---|---|
| Latest | ✅ Yes |
| Older | ❌ No |
If you discover a security vulnerability, please follow these steps:
- Do NOT open a public issue
- Do NOT disclose it publicly
- Contact the maintainer privately
| Measure | Status |
|---|---|
| Environment Variables | ✅ Yes |
.env in .gitignore |
✅ Yes |
| Input Validation | ✅ Yes |
| Rate Limiting | ✅ Yes |
| Proxy Rotation | ✅ Yes |
| Access Control | ✅ Optional |
| Measure | Status |
|---|---|
| End-to-End Encryption | ❌ No |
| Two-Factor Authentication | ❌ No |
Never commit these to version control:
- Bot Tokens
- Proxy Credentials
- API Keys
- Private Keys
❌ .env ❌ Webshare_10_proxies.txt ❌ proxies.txt ❌ working_proxies.txt
text
| Data Type | Storage | Security |
|---|---|---|
| Bot Token | .env |
Local only |
| Proxy Creds | Text File | Local only |
| Videos | downloads/ |
Temporary |
| Logs | logs/ |
Local only |
# Pull latest updates
git pull
# Update dependencies
pip install -r requirements.txt --upgrade
# Restart bot
python main.py
📝 Reporting Process
text
1. Identify vulnerability
2. Contact privately
3. Acknowledge within 48 hours
4. Work on fix
5. Coordinated disclosure
📜 License Compliance
This project uses Mozilla Public License 2.0:
Source code must remain open
Modifications must be shared
Patent rights granted
⚠️ Disclaimer
For educational purposes only.
Users are responsible for:
Complying with laws
Respecting Terms of Service
Using responsibly