update headers and footers, update config for /.well-known routes

Author: netomi

configuration/application.yml

@@ -137,7 +137,7 @@ ovsx:
       enabled: false
     primary-service: aws
   webui:
-    frontendRoutes: "/extension/**,/namespace/**,/user-settings/**,/admin-dashboard/**,/about,/publisher-agreement-*,/terms-of-use,/members,/adopters,/error"
+    frontendRoutes: "/extension/**,/namespace/**,/user-settings/**,/admin-dashboard/**,/about,/publisher-agreement-*,/terms-of-use,/members,/adopters,/error,/.well-known/**"
   eclipse:
     base-url: https://api.eclipse.org/
     publisher-agreement:

website/src/about.tsx

@@ -61,12 +61,7 @@ const About = () => {
 
       <Heading variant='h5'>Contact Us</Heading>
       <Paragraph variant='body1'>
-        To report malicious extensions, extensions with known vulnerabilities, or other urgent matters, connect with us
-        at&nbsp;
-        <Link color='secondary' underline='hover' href='mailto:openvsx@eclipse-foundation.org'>
-          openvsx@eclipse-foundation.org
-        </Link>
-        . For non-urgent questions, including managing namespaces or publishing extensions, please visit our&nbsp;
+        For non-urgent questions, including managing namespaces or publishing extensions, please visit our&nbsp;
         <Link color='secondary' underline='hover' href='https://github.com/EclipseFdn/open-vsx.org/wiki'>
           wiki
         </Link>

website/src/footer-content.tsx

@@ -62,7 +62,9 @@ const MainFooter = ({ isSmallDisplay, isLargeDisplay, expanded, toggleExpanded }
       {isSmallDisplay ? null : repositoryLink()}
       {isLargeDisplay ? (
         <Box display='flex'>
-          <Box>{privacyPolicy()}</Box>
+          <Box>{ossAccess()}</Box>
+          <Box ml={itemSpacing}>{privacyPolicy()}</Box>
+          <Box ml={itemSpacing}>{securityPolicy()}</Box>
           <Box ml={itemSpacing}>{termsOfUse()}</Box>
           <Box ml={itemSpacing}>{compliance()}</Box>
           <Box ml={itemSpacing}>{legalResources(false)}</Box>
@@ -102,7 +104,9 @@ const FooterContent: FunctionComponent<{ expanded: boolean }> = ({ expanded }) =
     return (
       <Box display='flex' flexDirection='column' alignItems='stretch'>
         <Box display='flex' flexDirection='column' alignItems='flex-end'>
+          <Box mb={itemSpacing}>{ossAccess()}</Box>
           <Box mb={itemSpacing}>{privacyPolicy()}</Box>
+          <Box mb={itemSpacing}>{securityPolicy()}</Box>
           <Box mb={itemSpacing}>{termsOfUse()}</Box>
           <Box mb={itemSpacing}>{compliance()}</Box>
           <Box mb={itemSpacing}>{legalResources(isSmallDisplay)}</Box>
@@ -135,12 +139,24 @@ const repositoryLink = () => (
   </Link>
 );
 
+const ossAccess = () => (
+  <Link href='https://managed.open-vsx.org/contact' sx={[styles.link, styles.legalText]}>
+    OSS Access
+  </Link>
+);
+
 const privacyPolicy = () => (
   <Link href='https://www.eclipse.org/legal/privacy/' sx={[styles.link, styles.legalText]}>
     Privacy Policy
   </Link>
 );
 
+const securityPolicy = () => (
+  <Link href='/security/' sx={[styles.link, styles.legalText]}>
+    Security Policy
+  </Link>
+);
+
 const termsOfUse = () => <LegalLink to='/terms-of-use'>Terms of Use</LegalLink>;
 
 const compliance = () => (

website/src/main.tsx

@@ -11,13 +11,14 @@
 import { createRoot } from 'react-dom/client';
 import { FunctionComponent, useMemo } from 'react';
 import { HelmetProvider } from 'react-helmet-async';
-import { BrowserRouter } from 'react-router-dom';
+import { BrowserRouter, Navigate } from 'react-router-dom';
 import { ThemeProvider } from '@mui/material/styles';
 import useMediaQuery from '@mui/material/useMediaQuery';
 import { Main, ExtensionRegistryService } from 'openvsx-webui';
 import createDefaultTheme from 'openvsx-webui/lib/default/theme';
 import createPageSettings from './page-settings';
 import { createAbsoluteURL } from 'openvsx-webui/lib/utils';
+import { Route, Routes } from 'react-router-dom';
 
 const App: FunctionComponent = () => {
   const prefersDarkScheme = useMediaQuery('(prefers-color-scheme: dark)');
@@ -48,11 +49,22 @@ const App: FunctionComponent = () => {
   return (
     <HelmetProvider>
       <ThemeProvider theme={theme}>
-        <Main
-          service={service}
-          pageSettings={pageSettings}
-          loginProviders={{ github: createAbsoluteURL([serverUrl, 'oauth2', 'authorization', 'github']) }}
-        />
+        <Routes>
+          <Route
+            path='/security'
+            element={<Navigate to='https://researcher-recognition.open-vsx.org/open-vsx-security-policy/' />}
+          />
+          <Route
+            path='*'
+            element={
+              <Main
+                service={service}
+                pageSettings={pageSettings}
+                loginProviders={{ github: createAbsoluteURL([serverUrl, 'oauth2', 'authorization', 'github']) }}
+              />
+            }
+          />
+        </Routes>
       </ThemeProvider>
     </HelmetProvider>
   );

website/src/menu-content.tsx

@@ -33,6 +33,7 @@ import PeopleAltIcon from '@mui/icons-material/PeopleAlt';
 import HubIcon from '@mui/icons-material/Hub';
 import AccountBoxIcon from '@mui/icons-material/AccountBox';
 import BusinessIcon from '@mui/icons-material/Business';
+import SecurityIcon from '@mui/icons-material/Security';
 import { UserSettingsRoutes } from 'openvsx-webui/lib/pages/user/user-settings-routes';
 import { MainContext } from 'openvsx-webui/lib/context';
 import {
@@ -90,6 +91,12 @@ export const MobileMenuContent: FunctionComponent = () => {
           Commercial Usage
         </MenuItemText>
       </MenuItem>
+      <MenuItem component={Link} href='https://researcher-recognition.open-vsx.org'>
+        <MenuItemText>
+          <SecurityIcon sx={itemIcon} />
+          Report a Vulnerability
+        </MenuItemText>
+      </MenuItem>
       <MenuItem component={Link} href='https://github.com/EclipseFdn/open-vsx.org/wiki'>
         <MenuItemText>
           <MenuBookIcon sx={itemIcon} />
@@ -176,6 +183,7 @@ export const DefaultMenuContent: FunctionComponent = () => {
   return (
     <>
       <MenuLink href='https://managed.open-vsx.org/'>Commercial Usage</MenuLink>
+      <MenuLink href='https://researcher-recognition.open-vsx.org'>Report a Vulnerability</MenuLink>
       <MenuLink href='https://github.com/EclipseFdn/open-vsx.org/wiki'>Documentation</MenuLink>
       <MenuLink href='https://status.open-vsx.org/'>Status</MenuLink>
       <MenuTypography onClick={toggleWorkingGroupMenu} ref={workingGroupMenuEl}>

website/src/page-settings.tsx

@@ -215,7 +215,7 @@ export default function createPageSettings(
     );
     return (
       <Link
-        href={`mailto:openvsx@eclipse-foundation.org?subject=Report%20Abuse%20-%20${extension.namespace}.${extension.name}&Body=${reportAbuseText}%0A%0A${extensionURL}`}
+        href={`mailto:security@open-vsx.org?subject=Report%20Abuse%20-%20${extension.namespace}.${extension.name}&Body=${reportAbuseText}%0A%0A${extensionURL}`}
         variant='body2'
         color='secondary'
         underline='hover'