Security Policy And Response to Security Issues
Unfortunately security bugs are still a fact of life. We will need a web page describing our policy regarding handing of security issues. It should include information on how to report a bug, and the steps we will take to resolve the issue.
A starting point for this might be the Mozilla Security Policy.
The industry standard secu
...@osafoundation.org email address is available for informing us of security issues.