From 1d71a1e557bca96bee3f856961e158aa06279531 Mon Sep 17 00:00:00 2001
From: Shinei Nouzen <157171073+Shineii86@users.noreply.github.com>
Date: Thu, 27 Aug 2026 15:09:55 +0530
Subject: [PATCH] docs: add maintenance badge and security contributor credits
- Added Maintenance Active badge to README
- Added Security Contributors section crediting jamil182 for SSRF fix
- Added Credits section to CHANGELOG.md for v2.4.1
---
CHANGELOG.md | 3 +++
README.md | 7 +++++++
2 files changed, 10 insertions(+)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d06d7e9..e3de49b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- **Stream Proxy Allowlist Config**: New `STREAM_PROXY_DOMAINS` env var to override the built-in domain allowlist (comma-separated).
- **Stream Proxy Referer Config**: New `STREAM_PROXY_REFERER` env var to override the Referer header sent to stream CDNs (default: `https://megaplay.buzz/`).
+### Credits
+- **[jamil182](https://github.com/jamil182)** — Reported and fixed the SSRF vulnerability (PR #2), added SECURITY.md (PR #3)
+
## [2.4.0] - 2026-08-14
### Added
diff --git a/README.md b/README.md
index 5923a8f..d9e12eb 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,7 @@
+ 
@@ -2574,6 +2575,12 @@ git push origin feature/amazing-feature
- [Star History](https://star-history.com/) — GitHub star history charts
- [Capsule Render](https://github.com/kyechan99/capsule-render) — Header banner generator
+### 🔒 Security Contributors
+
+| Contributor | Contribution |
+|:---|:---|
+| [jamil182](https://github.com/jamil182) | Reported & fixed unauthenticated SSRF in stream proxy endpoints (PR #2), added SECURITY.md (PR #3) |
+
---
## 📄 License