Think about a security issue best practise

[sandreas]

If there is a security issue or vulnerability, there has to be a process how to handle that...

• Responsible disclosure email
• Warning that there is a vulnerability
• Short time to fix stuff

Parts that need special care:

• metadata parsers
• json parsers
• JavaScriptApi