Update SECURITY.md

This commit is contained in:
FreeScout
2026-09-07 01:27:41 -07:00
parent d9d02b5258
commit e91f2e410c

View File

@@ -13,4 +13,5 @@ Read about **[FreeScout's Security](https://freescout.net/security/)**.
* CVEs are requested after the fix for the vulnerability is released.
* If you found an issue related to the `APP_LIMIT_USER_CUSTOMER_VISIBILITY=true` mode, make sure to read the [FAQ](https://github.com/freescout-help-desk/freescout/wiki/FAQ#is-it-possible-to-have-separate-contactscustomers-per-mailbox).
* Support agents are allowed to move conversations to any mailbox, even to ones they don't have access to.
* Drafts are viewable/discardable by any member of the mailbox where they are created.
* FreeScout loads external images in received emails, and there is a Module allowing to disable loading external images: https://freescout.net/module/block-external-images/.