From fb4e2802e2a3f506b20d79b54d2cb099c3f58e2c Mon Sep 17 00:00:00 2001 From: Marcello Galvan Date: Wed, 6 May 2026 16:53:40 -0400 Subject: [PATCH] Update SECURITY.md (#38091) fix typo oncludes > includes --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index d84cc15691c..6c3d91aaeff 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -66,7 +66,7 @@ Reports are processed around once a month. ONLY vulnerabilities discovered, when the following setup on test platform is used, are "valid": * The version to analyze must be the last version available in the "develop" branch. Also, reports on vulnerabilities already fixed (so already reported) in the develop branch will not be validated. -* Installation must be done properly for a production usage. This oncludes: +* Installation must be done properly for a production usage. This includes: ** creation of the install.lock in the last step of installation process. ** $dolibarr_main_prod must be set to 1 in conf.php ** $dolibarr_nocsrfcheck must be kept to the value 0 in conf.php (this is the default value)