snoopdave opened a new pull request, #202: URL: https://github.com/apache/roller/pull/202
Adds two documents: - `docs/security-model.md` explains who Roller trusts, what each kind of user may do, the boundaries Roller keeps, and what is out of scope. It has diagrams of the roles, the request checks and content handling, plus an operator checklist. - `SECURITY.md` explains how to report an issue privately and links the model. Its text matches https://roller.apache.org/security.html. The ASF Security team asks projects to document their security model next to the reporting instructions. This follows that guidance. Not included: an `AGENTS.md` pointer. The repo has no `AGENTS.md` yet; that can come in a follow-up. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
