Improved: we no longer use the notion of pre-auth and post-auth

We rather use the security policy detailed at
https://ofbiz.apache.org/security.html

Author: JacquesLeRoux

README.adoc

@@ -187,16 +187,6 @@ In case of problems visit our link:#further-reading[Further reading section].
 [[security]]
 == Security
 
-* If you find a pre-auth security issue, please report it to: security @ ofbiz.apache.org.
-Once proper mitigations to the security issues are complete the OFBiz team will
-disclose this information to the public mailing list.
-* If you find a post-auth security issue, please https://s.apache.org/dsj2p[create a bug in our issue tracker (Jira)] .
-
-* If you want to use AJP on a non localhost OFBiz instance, you need to set the value of allowedRequestAttributesPattern
-in framework/catalina/ofbiz-component.xml
-
-You can find more information about security in OFBiz at
-https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure[Keeping OFBiz secure]
 
 [CAUTION]
 ====
@@ -205,6 +195,14 @@ In production never use the credentials contained in demo data. Not only the adm
 Also we recommend to not use Windows Server in production because we are not supporting specific Windows related security issues.
 ====
 
+* If you want to use AJP on a non localhost OFBiz instance, you need to set the value of allowedRequestAttributesPattern
+in framework/catalina/ofbiz-component.xml
+
+
+You can find more information about security in OFBiz at
+https://ofbiz.apache.org/security.html[the official security page]
+
+
 [[build-system-syntax]]
 == Build system syntax