Introducción

Squarespace está comprometido a mantener una postura firme en cuanto a la seguridad. Alentamos a los profesionales de la seguridad a poner en práctica la divulgación responsable y a informarnos de inmediato si descubren una vulnerabilidad. Investigaremos todos los informes legítimos y realizaremos un seguimiento si fueran necesarios más detalles. Antes de informar una vulnerabilidad, sigue nuestras Pautas de Divulgación Responsable y los Criterios de Envío que se indican a continuación.

Pautas de Divulgación Responsable

Si bien Squarespace valora enormemente los aportes y divulgaciones de la comunidad de investigadores de seguridad, es importante que las divulgaciones se hagan de manera responsable. Con esto en mente y en un esfuerzo constante por proteger a nuestros clientes:

Criterios de Envío

Dentro del alcance:

Fuera del alcance:

Notificar sobre un posible flujo de trabajo vulnerable

Ingresa una clave PGP válida para continuar

Envíanos un correo electrónico a usando la siguiente clave.

Clave Pública PGP de Squarespace

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBFnOeEkBEADLGHfIIRemQc8dH+wUG6dvBTUYfPEx5HERfWUo/52emo/HWSHZ
spWbxlCLJ+Wr4x1rycNDk4AfCY+bnbbrY/GIMu9RdiJbsNj3nbMAFLvrAcE6yX7d
C/dw6hKBq259AzH/C2+k501zsNe/mXpuv1gynIYyD9R8fDj0LvnwwVLn93UK3KwQ
QWTkh/2O1Y5m/BGKPSnnb0f33cWGkXeWMQdBKSRBM6S5Xjq+yVk0IFT6sWr3rB7T
tNezTGlMcGdjxxQPF0IfBIo4l3o5ZmbsPgz93QKLECAKVhSeO4fUgn/l2D8nKFVr
yc4hBTDu9QEDwW2nyv5F9cJMjgPkSM+2NZBskiAxe5TTOpECMFTzEugQ+xOtePt1
eWnFL28ptIYvUx5ab3olf1mk/uuy6QXSL/r2zVmNRugdEtUqe3xbJWUzHfLuhHSw
E9tl1s9ySPWFkOxnDkHJaMpFu3+b9o4GotwMAP3rgbzALdrrqUlfZqESWJm7xKEm
SL7WSPJW1la7tMi+g1Pjv3FRVHLpP8Z6dRzdBNXi5UEUiqktxJXC1KqGbKKDCXc9
5YOjktbmtFai/4Nz0S0/GzC3fEHksdoP811K0EjKfZYQIC3eqsmajfrDRGGwD2Dd
JBl0qsM7r7BmnlwZdfj7pje8KIwnHRPgdyo46a4pojLDRaIAGu3vV0Z5GQARAQAB
tCNTZWMgVGVhbSA8c2VjdXJpdHlAc3F1YXJlc3BhY2UuY29tPokCVwQTAQoAQQIb
AwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAIZARYhBGLBvZpTE9KkNN02pJ6LbG4D
VD2wBQJZzoUgBQkB2qjXAAoJEJ6LbG4DVD2w84IQAJ23I17cBt45yzgVAxkHuYc5
CIJ9lNHB5vlT5cRqpOjnmcml9S0EJm2ZdELZ2xszqDsc3lXH8t+UV2AOazfp80kq
MC5A8OPbnajELMPuRTZQyHfQRdufFHylJFz/b6Q9aXFxrnzoG/Ve9M90hoq92Huh
lDn4UF0ZwSmM7kPDp/ZJkgrVTApDpPwu0ZZOTcU7tHzyCysJZSopTbAdyP1n+C7I
yeSmQB7jsbQ4RohSGif7yTKqVYnADS405Mt939c/z907moPpoE5aExzjlaNFfeSk
MhvjMv1K8a8rcCZrbrMb/vTonoPAXqHhYX4409QLerTbGueQXGgzRs8Ru8xIvMjY
aLSfSxI0Y3q5pX9jLm4Op7q10vmY14hZVflRTueB5mz+w0+Tq4PVD1c1jLvtxQMj
8hb8xEiytS5fVOqwisXZm8XsjZlzAEFrXrISi7WIAV0XZVAeI7fYfw16NtCbpRDY
4KjcBL4cS2svs/RoxG5itUppVs57JHLze2QGU76GX7GYCGBaz9pKCDYyP9onOklL
RJ4B6XAN2z1HteRg/5W6pm4Y++6ZaFacmHVdHCll2DDaUvlZ11TpR8h1UH7HlwOB
5q3y7e5ZlpLeTMgYaMHcJ/FQjYM6OnZH6puCYQiegg4LVfG59sQyPzCXNdlSt5yJ
9Ql6zgb0xzWCR0zc1OMctCRUb20gVGNob3J6IDx0dGNob3J6QHNxdWFyZXNwYWNl
LmNvbT6JAlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQRiwb2a
UxPSpDTdNqSei2xuA1Q9sAUCWc6FIAUJAdqo1wAKCRCei2xuA1Q9sOmPEADFm3aK
fq2oxv5Q+uxdS7OAoqfpO+0dT6Diwich53Gj1HnBvzY9hD/446of/isaMTKILuGi
wpEnSHydeow332cKx28mi7iVZTshs7zLAtnV/GcIrw7jlSn2c3oSq3rqDt7ENEUv
7dE34YjaMI2/3dzMKqeMQUHFMRJOXP6bQfLqc1ZF1l1XIwne950FDe7ClqqsOfVi
SAfi0WK35XCmOV4UWczCKVY/GKnKQvkR+uPPpWOzwPDBdxZx9uBJqwLxFVHXY9+0
f/vqlSs3h/src1490+79/3uEOtzuP0wV7bJSO9z7forykyVti1wG3UWhlStznsj1
n2Srmq6rUNXH9xA6wDsydMj6+grtvMZGTjcv2l/Gdvg7JiiML94QcRZrMJq94YHu
at5PP9NLe7Oyighglht5/pK98IJjVNJ/6wb1RbNQeHCdNo94JCOr+1Cg5SShANQ5
TeK9hAsjyTR0ckCxzOG0szEgFde9i8iGrxjqEnOqpCcC45oJSFMqj6U9X6lMgNMa
Kw7JSdGqh+O+RvBu6YmI2thj4iOcD47AW9RSIXVd2ASh+yPn0p0iaq/l1p8VP1Bt
wofucuSxegvLS6VwcdLU/idP/44JqA/qwwOPHqdJmoG4X0qYYGZ/hLcM6ViEtcaO
O4qxpGxdLH3neEVIuWHY+NWxbOit2l+MX1/O97QmTWFyY28gQW5ndWxvIDxtYW5n
dWxvQHNxdWFyZXNwYWNlLmNvbT6JAlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsFFgID
AQACHgECF4AWIQRiwb2aUxPSpDTdNqSei2xuA1Q9sAUCWc6FIAUJAdqo1wAKCRCe
i2xuA1Q9sF42D/9VqqG+qvTOzV7Tb/BRlEOYrNO1QSJzs0HP2/Odt52qiZfeyf79
I8fpq52DEa4lypN16Ciql6zTIVeTnBmjZK+EGjDIUYd1ZmXWc6a9Ykp9s0LB1AgR
joqpoPe2Ul0HSQZwejCrDwbBUrsYSeJdCRafI6ePfg6TAqyB7zvriHzCF+1L7VJz
NpYVgjXKHjZFXvcSbnj0nSz3FAwxveSDLJH5tBIGJuqlkIf6mXTFEP3aLhkGK0BZ
PJTtYcB4mmj+CpZNqAjN+rWeWS2mEuzzCZgor0qgcrvm4wo9M34DDsUAewigkt1Q
Xo5FFd2BML9Z4/J/bx2JA4QHNhNsJLIBV7LmNWUdu+dcGKaWKv+MpJMHDfB5L8fa
Qg6i3ABAtl1b/FXzxuVLCF0GBbYjk88cUcZDh5FLpqnFwmAZbZYGWh4FzHn8jHsZ
YINn+GjldmW6scW9HGwk1N9fmQk4bi1tDs7EL3LQuFRIcfh3k4dIW5GXg51u/yUh
v3Cs0PQQMb6Wu4Zpn1ceJ+hnmBfTKAFz90SOcXJ869i+J8xWSJlxzLmJo1rr/+Fr
1n+r1BswuQ73pNRBJNwhuXoEXlazLisNxtTI/Tccy1KaHy3FJIZvzbHUK9ZeH5Ue
ZO1ZX1CNMYsRIcgV2zCU/DDZMksSEFTIQhL1MShT23b64+4SMl+Yb9+Md7QlRXJp
YyBNdXJwaHkgPGVtdXJwaHlAc3F1YXJlc3BhY2UuY29tPokCVAQTAQoAPgIbAwUL
CQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBGLBvZpTE9KkNN02pJ6LbG4DVD2wBQJZ
zoUgBQkB2qjXAAoJEJ6LbG4DVD2w/40P/1qcvSaABnDMeUEXj49kk4nyrjXREJr2
3klyNsFqXHxFWYaoA5MkcUIqiG87t3Qc0io3K8uU7a5O626B3NmH1GOrdVr1FlFE
uSFN8S4f+XHE7HWfPW6JbuUy5+sN62+QOHkRr8hRcJi8JFN40eVJN+2xGFaBuNwI
/qu1QL1RbybJHV31h1fwn5ntwK1aYxt07ZQbtFXoPDG+lTP/9zcn1Vde7hZbU++0
pUxTOopogz+ZlP/8jO/b9GztBDR2vmxf8sMMGVPcTByraqkRcfr/0Xcer5dznBoO
wDjf7ZdIdGVNIp7a4hHcOSRWp4G2iy9J+K9iLWDOsmJ1ingBCZmhnPXzhuAJl9vU
7xcYSl5DjYCVRA44B7CsbIY03AR+1ICtg9Nkxzzngv/LSUZhhUbknkg2ryzpH/zE
Lf4XmW6uMop4KvI27907vgnokwNlVCSkvca8n3qMXvpEJNoLXNVzTx/Pi3q4DgA+
hV5HhKB5UTyUynO9G1XTPqOqTimBvHwU2Ca4b9Jg1+ET2vmDh4vIml7AT/tm2qjN
Z0f+JJEJoQQI8ZhY771dzUEgRynTNf5kVlbDd6jUr88LNl/uLicrAgqcAylYZ+oZ
XdQen57hC0BOOz9vlC5A2/1tOksqD08+tShA1b4aD9adQiTvPFShfeqfhaMjTvR+
aJ9WB0UjepaHtCVSeWFuIFdoYWxlbiA8cndoYWxlbkBzcXVhcmVzcGFjZS5jb20+
iQJUBBMBCgA+AhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAFiEEYsG9mlMT0qQ0
3TaknotsbgNUPbAFAlnOhSAFCQHaqNcACgkQnotsbgNUPbBwBxAApA7hN5wgh828
ChBTnhjd5jdWCMiyPLydUAciiThxr8/Zm/yK601hcatuDL/v5mPYQxd87ngulpG6
FbQ1onEVLH48wBycAtXJi2ZyQfHkPC/Rik4yJI2wCOnPxX3tqfqpzRjNWpXyWrII
/L/bxfgwzgssgyrXTLEc/69lpnaO0BrFgDSuzJGWG6ykkJmWsoObTR8hqlKjZ6p1
780lKMF4Vt+YJyDhqiFRQczwCffbxGv+Hc8jexSiEm4ZNbpgIsIreOR2+TupBrtb
WVpgaOzndfjlwjjnwp84lg7UIYTLTj71nF06iBUlsC/DCeMyaEV1jTZPiGGezNdH
p3B2XxJ3kuwq7x35LFbmyMZZ1YEo66xjAa2u+ziky/2+E1Xh8qrKPu2Z7zkveRVq
4RhSSCD+4lqpZtPeusRZ7XBrU2aLAqeT9r1bDu8D3cu7LJ3q0WIJF9jijFUeZk+b
7BTu0m2hXCFJ+jFJdHIlvb728GBwLBoD49M3fWzs3ELCy7BOd/UkaT4VUtm/UtGU
uWqVMyIG87M90UjtdE34fZk7L+RR9k8mj2ZzEcKKCtQlQCbAAIFQm/SFyE1Td4fs
1qF5bYBN36D9QSk4RJXe5S9BAOffxiQ+y4TFQvzfhu1IiXN+7dpkvS4O92h9gevA
kR0eSihspOqpFszE4TL5KVjrDhhn4G25Ag0EWc54SQEQAM5ObNl6VdjgT+7TrixX
HWSU5UTwDiy8QEyth8ciQPZCc4zfCtwyhu71iLI77p9N2ppZX1J5Kpax1RLMVcJO
g0iXnnPwz4aOd5ktQZXSR7ylBSPlGOPWD3B8qXbe4uFKlH07bIx+HH0MTaEVxIYm
tTlWHgOna0ZIuyUjH2MRSlJsh0uuIUGjb/gSbc4tpaYFMVGyVxeuanHuJ42bRKfi
qnFVbQkDQGjr+ArQ18Ouq+OY8/GYdNlOZ6obhiOUqjJq6tZRT2F391JgwDIoBqua
xI2WPA45y1YwErtrNGLWGAg/3uL9ra8vjh1E+Mmd//fkpwLNGJx7puQNr6GwPSP3
pefgglsmhIWKL5lWtDqJjr0109tiZl0f5FzRKvM5cHle0owRbffrGHuXPaP/95BJ
bpjIC3IAPW3JlPxz1AC5nBLSL7oaqYDGLEog7YuQp7FwSkk7mVYEu38KnOOEDCcu
B09kERGKaYvAc1YU0IT5Tqwda+QBstyFQME9M1J4QwOVBtwunNFd9FUDFthxffZP
AvAreWqxGBMJrSZA4H3x+yZ7ZjoYL6Y32GPZHeedyzbCeswtTR1RXMOjh77CFhfC
G0fasN2cypDLBQC0afoiaTZmVFsxEm/9nWlMys7Q9TRLznnQrvHKFJU47v4p6TYu
iwFD6we8bfsyLucA0HzXFqqzABEBAAGJAjwEGAEKACYCGwwWIQRiwb2aUxPSpDTd
NqSei2xuA1Q9sAUCWc6OewUJAdqyMgAKCRCei2xuA1Q9sE/SD/wLikEPesrXsn6g
ZH6OYM9OEXLgnGXsmuTSp2Fwir7oIjrbBPNmw4RbX/R+v/XjbP51R3HuL30OiSkd
ZWoTibZbHIjpKBxmlW2RPr3+APl6VJIzXM2mW7V5xCP07yY8bjmCvSHJgH8XbuDD
IN0zuaYK5vh9YeKTuskVqPSaHUfPWEVh7LimABIcV/Whoo6uYPnkkOWELrCP88i5
GH+LfdRn/xReXA626TPW+Vn6FslHX5Q41rh+ZNaD9M9duwA47cYFxT1skkDKxNqt
w9GFgmTSC7kZYr1qvm9/h5585fh27JhzCa9wr5Ivo3P/93BjkaSrckXMDQkpI0Vw
G5AJQCTtapopsyob1P6DEBs7CKg7rFUNHW4MKR376w77KZTkII6DpAHEsgvDEg8u
g5a3NBVwA2Kpak5B24B0h5h3SgCIbFrIgg2ILP6zsQb6xKY9JSXxO9Ei6wVajCiL
evYHC2Xxvz43b1XNurlLUyXulZ53uW0hQ2Rv6Z0wh+wlcC7mDijg5t7XaWegjCrg
XksQn2ap3AIn90J8Rlk1DNDynzPpC805h709V7YPYr6NJbOTNm46j/Eq1j1/93Gz
svYr5FtwvfZ3Jff817gu2dUoCHHi5MVlCCuIdOANED/090MZFsVR1oYdTzWOkh2K
++WU9JXK2KZuC3DCAAIQTY2HQ9/AMw==
=J0TH
-----END PGP PUBLIC KEY BLOCK-----