Merge branch '467-add-security-txt-to-public-webroot' into 'develop'

Resolve "Add security.txt to public webroot"

Closes #467

See merge request t3o/typo3.org!346

.gitignore

@@ -5,7 +5,8 @@
 !/private/typo3conf/LocalConfiguration.php
 !/private/typo3conf/AdditionalConfiguration.ddev.php
 !/private/typo3conf/RealurlConfiguration.php
-/public/
+/public
+!/public/security.txt
 /public/services/api-keys.php
 !/public/humans.txt
 !/public/robots.txt

public/security.txt

+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+# Please report vulnerabilities using the TYPO3 security team address
+Contact: mailto:security@typo3.org
+
+# OpenPGP key
+Encryption: https://typo3.org/fileadmin/t3o_common_storage/keys/B41CC3EF373E0F5C70187FE93BEFBD27C05FBE60.asc
+Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/B41CC3EF373E0F5C70187FE93BEFBD27C05FBE60
+Encryption: openpgp4fpr:B41CC3EF373E0F5C70187FE93BEFBD27C05FBE60
+
+# Preferred language when contacting us
+Preferred-Languages: en
+
+# Canonical URL
+Canonical: https://typo3.org/security.txt
+-----BEGIN PGP SIGNATURE-----
+
+iQFHBAEBCAAxFiEEtBzD7zc+D1xwGH/pO++9J8BfvmAFAl48l3cTHHNlY3VyaXR5
+QHR5cG8zLm9yZwAKCRA7770nwF++YDiJCADOaMwukxyD7JGZHChu3FElFJyfPFq3
+AcgXgSa4f4hZLiZkQwGjfahD36LSgZbudirPMoXn0XXPeF1/o6kIA3CNHzX8Z7rd
+QxhN7tEKzOXaQabFLFkxXMPSf8Uj/Gptsu0rf1pyKrG4eh8KhJSV/8uHFD8RGeMx
+88faTIM1VXakoaJDHLMQ1fkb8Nb3ooNXxWWAAy2+lxG5QkikRDCjkeUNwr9nnyiF
+r8DgKv46LdqQWUedRaOjyAYog30jahlD46RHrfEb4rmVJGk3GOfuZnZAs/qwYWfV
+otIzGzet7EWtEJld3OK0MsowLbt6WOl1/99QUPzglc/TSrEuf7JOQqu2
+=7/kv
+-----END PGP SIGNATURE-----