From 8a2c26bb1fdb8a3670f0727dace76576f8eecc64 Mon Sep 17 00:00:00 2001 From: "pulse-triage[bot]" <249995291+pulse-triage[bot]@users.noreply.github.com> Date: Sat, 31 Oct 2026 18:40:24 +0000 Subject: [PATCH] Keep security reporting direct without a redundant fragment link The consuming browser exposed an existing same-fragment navigation limitation while testing the extra lower-page backlink. Keep the existing contact directly in the new reporting section and remove the redundant lower line, rather than introduce a navigation dependency or change the Docs runtime. Preserve both adverse browser results. Contract-Neutral: Reporting-only documentation and registered test correction; no runtime or security contract change. Change-source: pulse-maintainer --- SECURITY.md | 1 - frontend-modern/public/docs/SECURITY.md | 1 - .../src/features/docs/__tests__/securityReportingGuide.test.ts | 1 - 3 files changed, 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 5c7e0b640e..cfd378ace0 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -161,7 +161,6 @@ incident, defer live checks and follow [backup safety](docs/VM_DISK_MONITORING.m **Documentation:** [Critical security notice for container deployments](#critical-security-notice-for-container-deployments) **Issues:** -**Private disclosures:** [Reporting a vulnerability](#reporting-a-vulnerability) --- diff --git a/frontend-modern/public/docs/SECURITY.md b/frontend-modern/public/docs/SECURITY.md index 5c7e0b640e..cfd378ace0 100644 --- a/frontend-modern/public/docs/SECURITY.md +++ b/frontend-modern/public/docs/SECURITY.md @@ -161,7 +161,6 @@ incident, defer live checks and follow [backup safety](docs/VM_DISK_MONITORING.m **Documentation:** [Critical security notice for container deployments](#critical-security-notice-for-container-deployments) **Issues:** -**Private disclosures:** [Reporting a vulnerability](#reporting-a-vulnerability) --- diff --git a/frontend-modern/src/features/docs/__tests__/securityReportingGuide.test.ts b/frontend-modern/src/features/docs/__tests__/securityReportingGuide.test.ts index a0d3113e6f..fe96f77ff7 100644 --- a/frontend-modern/src/features/docs/__tests__/securityReportingGuide.test.ts +++ b/frontend-modern/src/features/docs/__tests__/securityReportingGuide.test.ts @@ -23,7 +23,6 @@ describe('private vulnerability reporting guidance', () => { // Opening the contact must not prefill credentials or diagnostic material. expect(contact?.getAttribute('href')).not.toContain('?'); expect(rendered.querySelectorAll('a[href^="mailto:"]')).toHaveLength(1); - expect(rendered.querySelector('a[href="#reporting-a-vulnerability"]')).not.toBeNull(); }); it('separates sensitive reports from public support without requesting unsafe evidence', () => {