Security: BITNP/issues

Security

SECURITY.md

Security Policy

This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.

Supported Services

You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:

  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn

Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.

Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.

Reporting a Vulnerability

For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.

Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).

We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.

安全报告

本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。

支持的服务

欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：

  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn

目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。

有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。

报告须知

我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。

我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。

我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。

There aren't any published security advisories

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Security: BITNP/issues
Security

SECURITY.md

Security Policy
This document is for reference only (the Chinese version is the final version). While we reserve the right to repeal or amend this policy in any way, at any time at our absolute discretion, we may not be able to accomodate all requests due to Institute policies, Chinese laws, or other reasons.
Supported Services
You are welcome to report all vulnerabilities or incidents to us, related to services under bitnp.net domain (no matter it's a campus-network only service or not), including but not limited to:
  • www.bitnp.net
  • mail.bitnp.net and related mail services
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
Currently, the only service NetPioneer Association maintains under bit.edu.cn is mirror.bit.edu.cn / mirrors.bit.edu.cn.
Please report other security vulnerabilities in BIT network or domain to BIT Network Information and Technology Center. We have direct contacts in related institute departments, which may help if you need immediate response, but you may want to contact only NITC directly if you think the information should only be exposed to the direct responder of BIT network, or Institute staff members.
Reporting a Vulnerability
For responsible reporting, please only send an email with related information to webmaster@bitnp.net. Please do not use this GitHub issue board for any security reporting, but we can consider publishing the information here once it's resolved.
Unfortunately we do not have a public key for email encryption yet. Please inquire through email if you need one (we can provide personal public key for this purpose on this page, if required).
We strive to give first email response in 24 hours. We uses BJT (UTC+8), but since we are students, you may get a response outside regular "business hours". NetPioneer Association is a non-profit student organization of Beijing Institute of Technology in China, directed by Youth League Committee of BIT, so we do not provide bounties, but we are happy to give you the credit that you deserve.
安全报告
本文档仅供参考。我们保留对该策略的解释权、修改权。我们可能会因为学校政策、国家法规等原因，无法满足所有要求。
支持的服务
欢迎各位向我们反馈 bitnp.net 域名下的任何服务的安全问题，无论是只对校园网开放的服务、或对外服务，均可反馈。服务包括但不限于：
  • www.bitnp.net
  • mail.bitnp.net 及相关的邮件服务
  • clinic.bitnp.net
  • live.bitnp.net
  • mirrors.bitnp.net, mirror.bitnp.net, mirror.bit.edu.cn, mirrors.bit.edu.cn
目前网络开拓者协会在 bit.edu.cn 域名下运营的服务只有 mirror.bit.edu.cn / mirrors.bit.edu.cn。
有关北理工网络或域名下的其它安全问题，请联系北京理工大学网络信息技术中心。我们与有关学校部门均有直接联系人，在你需要及时回复的时候我们可以协助联系。不过，当该安全信息只应由有关直接负责人、或学校职工知悉时，请直接联系网络信息技术中心。
报告须知
我们希望各位能够负责任地报告安全问题。请将有关信息发送邮件至 webmaster@bitnp.net。请不要使用这里的 GitHub issues 来报告任何安全问题，但我们可以考虑在问题解决后在此发布。
我们暂时没有公开的邮件加密公钥。如有需要，请邮件联系我们获取（我们也可以在本页面上提供个人的邮件加密公钥）。
我们尽力于 24 小时内完成初步回复。我们的时区是 UTC+8，但毕竟我们是学生，你可能会在正常“办公时间”外得到答复。网络开拓者协会是非营利的学生组织，为北京理工大学团委下属，因此我们无法提供赏金，但我们可以公开致谢。
 There aren't any published security advisories