If you have found a weakness in worldwideaircraftmarket.com — something that could let a person see, change or take down what they should not — we want to hear about it, and we are grateful to whoever takes the time to tell us.
How to report it
Write to palliser@worldwideaircraftmarket.com with:
- what you found and where (the address, and the steps to reproduce it);
- what someone could do with it;
- how to reach you, if you would like an answer or to be thanked by name.
Please keep it between us until it has been fixed.
What we do with a report
This is a small, independent project run by one person, so we do not promise the timings of a large company — but we promise to read every report, to acknowledge it within a few days, to tell you what we are doing about it, and to fix a real problem as soon as we can.
Our promise to people who report in good faith
We will not take legal action against, or ask anyone else to take action against, research done in good faith that keeps to these rules:
- look only as far as you need to show the problem, and do not keep, share or change anyone else's data;
- do not disrupt the website or degrade it for others — no denial-of-service tests, no flooding with automated requests, no spam;
- do not try to trick people (phishing or social engineering), and do not attack the services the website relies on (Cloudflare, the map providers);
- give us a reasonable time to fix the problem before you tell anyone else.
What is not a security issue
Reports from automated scanners with no demonstrated effect, missing "best practice" headers with no way to exploit them, and anything about third-party services rather than this website are welcome as notes, but we do not treat them as vulnerabilities.
There is no reward: the website is non-profit and charges nothing to anyone. We will gladly thank you by name here, if you want.