This question was posted here on Meta today, detailing a security vulnerability in chat.

stackexchange.com/about/security says:

Please do not post serious security issues publicly on a meta site or elsewhere.

That's not a very discoverable page - I had to Google to find it - so perhaps instead, we should have a tag popup for people who use the tag, reading something along the lines of

If you believe you've found a security vulnerability, please use the contact form instead of posting it publicly on Meta.


I totally agree a message should be added. In the mean time I have added a small note to the tag excerpt, which will tell users to use the appropriate form.

It reads now:

For posts about security issues centered around Stack Exchange. If you think you found a serious security vulnerability, please report it on the Security page found at http://stackexchange.com/about/security. Do not post such reports on Meta!

Feel free to alter the tag wiki or proposal in my answer.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .