Security

Integrations.js security overview

User Data

Integrations.js is designed to never send data to any 3rd party (including integrationsjs.com) except those that integrations are built for. For example, dataset context stay in the user's browser until they use an integration like Google Sheets export, at which time their data is sent to Google directly via client site API call.

Whitelist Javascript Origins

In order to prevent 3rd parties from using your api key on their site, integrationsjs.com accounts can be configured with whitelisted Javascript origins. These can be configured by logging into your integrationsjs.com account and visiting the advanced configuration page: https://www.integrationsjs.com/dashboard/advanced

Report Security Issues

Blockspring takes security of our software very seriously. If you discover a security issue in the integrations.js project or the integrationsjs.com hosted service, please email the details to our security team at [email protected]. We will respond to confirm the receipt of your message and follow up with a review of the issue and plan for mitigation. We follow responsible disclosure and will credit researchers when a security issue has been identified and mitigated.

Details to include when reporting an issue

  • Steps that can be taken from initial installation of the integration to a point where the vulnerability can be observed
  • Any suggested patches or fixes you may have in mind to mitigate the problem
  • Any other relevant information like domain names, urls or account emails that are required to replicate the issue.

Reminder: Please do not report security issues via github issues

You can use the following public key if you would like to encrypt any communications

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: OpenPGP v2.0.51
Comment: Blockspring.com PGP Key
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=MQe0
-----END PGP PUBLIC KEY BLOCK-----