# security.txt — RFC 9116. Canonical location; /security.txt is an alias that serves the
# same fields (src/app/security.txt/route.ts). Ported from csf.bg/security.txt.
#
# This copy is a static asset, so it cannot read NEXT_PUBLIC_SITE_URL and states the
# production host outright — which is correct: RFC 9116 requires absolute URLs, and a
# Canonical pointing at a staging origin would be meaningless to a reporter.
#
# Keep Expires in the future. When you refresh it, update BOTH this file and
# src/app/security.txt/route.ts (the shared constant there) so the two stay identical.

Contact: mailto:security@csf.bg
Contact: https://csf.bg/za-nas
Expires: 2027-08-03T00:00:00.000Z
Preferred-Languages: bg, en
Canonical: https://csf.bg/.well-known/security.txt
Canonical: https://csf.bg/security.txt
Policy: https://csf.bg/regulacii