docs: align published and security guidance

2026-07-29 19:41:53 +10:00
parent 6ddda00eb3
commit df3ce58bd4
5 changed files with 86 additions and 11 deletions
@@ -0,0 +1,14 @@
+# Security policy
+
+Report suspected Lildra vulnerabilities privately to [support@napper.au](mailto:support@napper.au) with the subject **Lildra security report**.
+
+Please include:
+
+- the Lildra version and browser;
+- the affected page type;
+- clear reproduction steps; and
+- the potential security or privacy impact.
+
+Do not include passwords, authentication details, student records, or private lesson content. Use a minimal test case or redacted information where possible.
+
+Please do not disclose a suspected vulnerability publicly before there has been a reasonable opportunity to investigate and respond.