Update SECURITY.md

Signed-off-by: Joyce <[email protected]>
publicsuffix · Sep 15, 2023 · 8c143c6 · 8c143c6
1 parent c6b7a85
commit 8c143c6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -8,4 +8,7 @@ Security updates are applied only to the latest release.
 
 If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released.
 Please disclose it at [security advisory](https://github.com/publicsuffix/list/security/advisories/new).
+
+Reports are limited to repo matters. Any vulnerability reports related to the addition or removal of PSL entries in the .dat file shall be rejected and referred to filing pull requests that should make mention the alleged urgency.
+
 This project is maintained by a team of volunteers on a reasonable-effort basis. As such, please give us at least 90 days to work on a fix before public exposure.