The @w3c@w3c.social "Standards Vulnerability Disclosure & Handling Process Policy" document explains how to responsibly report #security vulnerabilities in W3C specifications. It defines the process for reporting, acknowledging, verifying, resolving, and disclosing security issues in #WebStandards #GroupNoteDraft ▶️ https://www.w3.org/TR/security-disclosure/ We appreciate researchers helping keep the Web secure by reporting issues in W3C specifications. Feedback welcome: https://github.com/w3c/security-disclosure/issues