docs: add note about security report location

expressjs · Dec 16, 2021 · a75e470 · a75e470
1 parent db05a74
commit a75e470
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Security.md b/Security.md
@@ -16,6 +16,10 @@ contributions.
 
 Report security bugs by emailing the lead maintainer in the Readme.md file.
 
+To ensure the timely response to your report, please ensure that the entirety
+of the report is contained within the email body and not solely behind a web
+link or an attachment.
+
 The lead maintainer will acknowledge your email within 48 hours, and will send a
 more detailed response within 48 hours indicating the next steps in handling
 your report. After the initial reply to your report, the security team will