Security reference
The details you look up. Security helpers, the automated checks, and every past advisory.
The pages in this section are for looking things up. For how to use them, start with the guides.
- Security helpers: every helper of Core and the frontend for certificates, redaction, admin access, webhooks, paths, and untrusted content.
- Automated security checks: the tools that check code, dependencies, and workflows, and where they run.
- Past advisories: every published advisory, grouped by kind, with what went wrong and the lesson.