Security policy

[prudloff-insite]

We found a potential vulnerability in this extension.
What is the correct way to report it privately?

I found this page but it does not mention an email address or a form.
I suggest adding a SECURITY.md file to the repository: https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository

[krabina]

@gesinn-it-gea @JeroenDeDauw

[Rudloff]

I see it is now possible to report vulnerabilities privately with this form: https://github.com/SemanticMediaWiki/SemanticFormsSelect/security/advisories/new
(I don't think it was there before.)