Security Policy
Thank you for helping keep ToneCustoms and its documentation trustworthy.
Scope
This repository contains the public documentation for ToneCustoms. Reports relating to its published documentation, such as exposed secrets, unsafe links, or information that could compromise users, are in scope.
This repository does not contain the ToneCustoms FiveM resource source code or installation packages. Questions about features, installation, purchases, or routine troubleshooting belong in the official community support channels.
Reporting a Security Concern
Please do not post sensitive details in public GitHub issues, pull requests, discussions, or Discord channels.
- If GitHub's Private vulnerability reporting option is enabled for this repository, use Security → Report a vulnerability to send your report privately.
- If that option is not available, visit the official ToneCustoms Discord and request a private contact method without publishing the vulnerability details. Only share the details through an agreed confidential channel.
To help with review, include (where relevant):
- A concise description of the issue and its potential impact.
- The affected documentation page or URL.
- Reproduction steps that do not expose private data.
- Suggested mitigation, if known.
Do not include passwords, access tokens, license keys, server credentials, or anyone else's private information.
What to Expect
Reports will be reviewed when received through an appropriate private channel. We may request clarification, correct affected documentation, or direct reports to the relevant external provider when an issue is outside this repository's scope.
No fixed acknowledgement, resolution deadline, or support-level agreement is promised.
Safe Disclosure
Please give ToneCustoms a reasonable opportunity to review and address a security concern before publishing details that could put others at risk.
General Support
For non-security questions about ToneCustoms, use the official Discord community.
For an introduction to ToneCustoms and its official links, return to the documentation homepage.