07:28
<annevk>
Shannon Booth: if it's already in WPT it's public. If it's not in WPT or you are unsure you can use https://github.com/whatwg/html/security/advisories/new
07:34
<Shannon Booth>
ok thanks!