summaryrefslogtreecommitdiffstats
path: root/SECURITY.md
diff options
context:
space:
mode:
authorPJ Fanning <fanningpj@apache.org>2023-10-24 21:50:57 +0000
committerPJ Fanning <fanningpj@apache.org>2023-10-24 21:50:57 +0000
commit0fe45fe8991e76a0398b926d717a20fd66281a78 (patch)
treebadb3995dc3e2e904ce6c8ba86d3252a79c71a0f /SECURITY.md
parent7c5a3ee7fc50e511b139a96c3ca4236046f60cd2 (diff)
downloadpoi-0fe45fe8991e76a0398b926d717a20fd66281a78.tar.gz
poi-0fe45fe8991e76a0398b926d717a20fd66281a78.zip
security docs
git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1913302 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'SECURITY.md')
-rw-r--r--SECURITY.md7
1 files changed, 6 insertions, 1 deletions
diff --git a/SECURITY.md b/SECURITY.md
index ef6bdc6988..45892998cd 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,4 +1,9 @@
# Security
If you suspect you have found a security vulnerability in Apache POI code, please read https://www.apache.org/security/
-for how to report the issue. Please do not report the details publicly until the report is reviewed. \ No newline at end of file
+for how to report the issue. Please do not report the details publicly until the report is reviewed.
+
+## Secure Processing
+
+We strongly discourage users of Apache POI from using the lib to parse documents from untrusted sources. For more details,
+please read https://poi.apache.org/security.html. \ No newline at end of file