对你的 Supabase 项目进行安全测试
Supabase 渗透测试的客户支持政策
🌐 Supabase customer support policy for penetration testing
Supabase 的客户可以对他们托管的 Supabase 项目组件进行安全评估或渗透测试。对于在 允许服务 下列出的客户服务，这种测试无需事先批准。Supabase 不允许托管可能被视为恶意的安全工具，或者可能针对 Supabase 客户或外部服务的活动。本部分内容受 Supabase 可接受使用政策（AUP）约束。
🌐 Customers of Supabase are permitted to carry out security assessments or penetration tests of their hosted Supabase project components. This testing may be carried out without prior approval for the customer services listed under permitted services. Supabase does not permit hosting security tooling that may be perceived as malicious or part of a campaign against Supabase customers or external services. This section is covered by the Supabase Acceptable Use Policy (AUP).
确保测试活动符合该政策是客户的责任。任何在政策之外进行的测试都将被视为针对 Supabase 的直接测试，并可能被标记为滥用行为。如果 Supabase 收到与你的安全测试相关的滥用报告，我们会转发给你。如果你在任何 Supabase 产品中发现安全问题，请立即联系 Supabase Security。
🌐 It is the customer’s responsibility to ensure that testing activities are aligned with this policy. Any testing performed outside of the policy will be seen as testing directly against Supabase and may be flagged as abuse behaviour. If Supabase receives an abuse report for activities related to your security testing, we will forward these to you. If you discover a security issue within any of the Supabase products, contact Supabase Security immediately.
此外，Supabase 与 HackerOne 一起运行一个漏洞披露计划（VDP），外部安全研究人员可以报告在上述计划范围内发现的任何漏洞。客户渗透测试不属于此 VDP 的范畴。
🌐 Furthermore, Supabase runs a Vulnerability Disclosure Program (VDP) with HackerOne, and external security researchers may report any bugs found within the scope of the aforementioned program. Customer penetration testing does not form part of this VDP.
允许的服务 #
🌐 Permitted services
- 身份验证
- 数据库
- 边缘函数
- 存储
- 实时
https://<customer_project_ref>.supabase.co/*https://db.<customer_project_ref>.supabase.co/*
禁止的测试和活动 #
🌐 Prohibited testing and activities
- 任何与AUP列出的内容相反的活动。
- 拒绝服务（DoS）和分布式拒绝服务（DDoS）测试。
- 跨租户攻击，指的是直接针对其他 Supabase 客户的账户、组织和项目进行的测试，而这些并不在客户的控制范围内。
- 请求泛滥。
条款和条件 #
🌐 Terms and conditions
客户同意以下内容，
🌐 The customer agrees to the following,
安全测试：
🌐 Security testing: