EdOverflow

Setting limits sounds like a reasonable way of tackling this problem to me. :+1:

Yeah, just wanted to confirm here so that we have a record of it: @nightwatchcyber and I decided it made sense to address file systems in a future specification.

Maybe also worth noting that some developers have started referencing their `security.txt` files in their Docker images too: ``` $ docker inspect --format={{.Config.Labels}} atlassian/bitbucket-server map[maintainer:[email protected] securitytxt:https://www.atlassian.com/.well-known/security.txt] ```

Can we close #184 in favour of this?

@austinheap, yes, I believe it should be doable using the latest Internet draft.

Maybe we could create little labels for each language? Something along the lines of this: 

Thank you, @jamieweb. I got this response from the original bug reporter via email: > Thanks, I'll be sure to follow the ticket's progress. > > I do not have...

> Do you have a link to said "ISO 8601" standard? [`https://www.iso.org/obp/ui/#iso:std:iso:8601:-1:ed-1:v1:en`](https://www.iso.org/obp/ui/#iso:std:iso:8601:-1:ed-1:v1:en)

> Only informative sections of standards are publicly available. To view the full content, you will need to purchase the standard by clicking on the "Buy" button. Yes, you have...

Just use [Google Translate](https://translate.googleusercontent.com/translate_c?depth=1&hl=en&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&sp=nmt4&tl=en&u=https://github.com/masatokinugawa/filterbypass/wiki/Browser%27s-XSS-Filter-Bypass-Cheat-Sheet&xid=17259,15700021,15700124,15700149,15700168,15700173,15700186,15700190,15700201&usg=ALkJrhh-ToiQOLlqfwRqcyNwHl9zu-Po7A) for the time being. @masatokinugawa does a good job at describing the conditions and I was easily able to reproduce the bypasses.