|
@@ -1,5 +1,9 @@
|
|
|
# Reporting security issues
|
|
|
|
|
|
+```{warning}
|
|
|
+Ensure you are viewing our [latest security policy](https://docs.wagtail.org/en/latest/contributing/security.html).
|
|
|
+```
|
|
|
+
|
|
|
```{note}
|
|
|
Please report security issues **only** to [security@wagtail.org](mailto:security@wagtail.org).
|
|
|
```
|
|
@@ -13,6 +17,8 @@ Once you've submitted an issue via email, you should receive an acknowledgement
|
|
|
|
|
|
If you want to send an encrypted email (optional), the public key ID for <security@wagtail.org> is `0xbed227b4daf93ff9`, and this public key is available from most commonly-used keyservers.
|
|
|
|
|
|
+This information can also be found in our [security.txt](https://wagtail.org/.well-known/security.txt).
|
|
|
+
|
|
|
Django security issues should be reported directly to the Django Project, following [Django's security policies](https://docs.djangoproject.com/en/dev/internals/security/) (upon which Wagtail's own policies are based).
|
|
|
|
|
|
## Supported versions
|