@@ -343,21 +343,23 @@ This document is a living record. It should be kept current so it is useful when
343343>
344344> Hi \< name\> ,
345345>
346- > Thank you for taking the time to report this — we genuinely appreciate it.
346+ > Thank you for taking the time to report this issue. We appreciate it.
347347>
348- > We have received your report and will assess it within the next few days . We will keep
349- > you updated on our progress.
348+ > We have received your report and will review it as soon as possible . We will
349+ > keep you updated on our progress.
350350>
351- > A few quick questions so we can handle this well:
352- > - How would you like to be credited in the advisory? (name, handle, organisation, or anonymous)
353- > - Do you plan to publish your own write-up or advisory? If so, is there a disclosure date
354- > that works for you?
351+ > Questions:
355352>
356- > We aim to treat all vulnerability reports in line with coordinated disclosure principles.
357- > If you have any questions or concerns at any point, please reply to this thread.
353+ > - How would you like to be credited in the advisory? (name, handle,
354+ > organisation, or anonymous)
355+ > - Do you plan to publish your own write-up or advisory? If so, do you have a
356+ > disclosure date in mind?
358357>
359- > Thanks again,
360- > The Pillow maintainers
358+ > We apply coordinated disclosure principles to all vulnerability reports. If
359+ > you have any questions or concerns at any point, please reply to this thread.
360+ >
361+ > Thank you again,
362+ > The Pillow team
361363
362364### A.2 Embargoed Distro Notification
363365
0 commit comments