Update the security policy to prevent some back and forth with the community

abstractj · abstractj · commit 5fa608dfd2dc · 2023-12-13T09:27:15.000-03:00
Signed-off-by: Bruno Oliveira da Silva &lt;bruno@abstractj.com&gt;

Signed-off-by: Bruno Oliveira da Silva &lt;bruno@abstractj.com&gt;
diff --git a/pages/security.ftl b/pages/security.ftl
@@ -11,7 +11,7 @@
 
     <p>It is important that suspected vulnerabilities are disclosed in a responsible way, and are not publicly disclosed until after they have been analysed and a fix is available.</p>
 
-    <p>To report a security vulnerability, send an email to <a href="mailto:keycloak-security@googlegroups.com">keycloak-security@googlegroups.com</a>.</p>
+    <p>To report a security vulnerability, send an email to <a href="mailto:keycloak-security@googlegroups.com">keycloak-security@googlegroups.com</a>. Please include the version affected, provide detailed instructions on how to reproduce the issue, and include your contact information for acknowledgements.</p>
 
     <p>If you would like to work with us on a fix for the security vulnerability, please include your GitHub username in the above email, and we will provide you access to a temporary private fork where we can collaborate on a fix without it being disclosed publicly.</p>
 

-Original file line number
+Diff line change
     <p>It is important that suspected vulnerabilities are disclosed in a responsible way, and are not publicly disclosed until after they have been analysed and a fix is available.</p>
 -    <p>To report a security vulnerability, send an email to <a href="mailto:[email protected]">[email protected]</a>.</p>
 +    <p>To report a security vulnerability, send an email to <a href="mailto:[email protected]">[email protected]</a>. Please include the version affected, provide detailed instructions on how to reproduce the issue, and include your contact information for acknowledgements.</p>
     <p>If you would like to work with us on a fix for the security vulnerability, please include your GitHub username in the above email, and we will provide you access to a temporary private fork where we can collaborate on a fix without it being disclosed publicly.</p>