From: PJ Fanning <fanningpj@apache.org>
Date: Tue, 24 Oct 2023 21:50:57 +0000 (+0000)
Subject: security docs
X-Git-Tag: REL_5_2_5~41
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=0fe45fe8991e76a0398b926d717a20fd66281a78;p=poi.git

security docs

git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1913302 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/SECURITY.md b/SECURITY.md
index ef6bdc6988..45892998cd 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,4 +1,9 @@
 # Security
 
 If you suspect you have found a security vulnerability in Apache POI code, please read https://www.apache.org/security/
-for how to report the issue. Please do not report the details publicly until the report is reviewed.
\ No newline at end of file
+for how to report the issue. Please do not report the details publicly until the report is reviewed.
+
+## Secure Processing
+
+We strongly discourage users of Apache POI from using the lib to parse documents from untrusted sources. For more details,
+please read https://poi.apache.org/security.html.
\ No newline at end of file