Docs Navigation Open

Bugs and Security

Report public bugs openly, but send suspected security issues through a private disclosure path.

Bug reports and security reports use different channels.

Normal Bugs

Use the public issue tracker when the problem is reproducible, not sensitive, and safe to discuss openly.

  • include Evolution version and PHP version
  • describe expected and actual behavior
  • include steps to reproduce
  • mention the extra or package involved

Security Reports

If the issue may expose accounts, content, manager access, or infrastructure, do not report it publicly. Use the private security reporting path instead.

See the dedicated Bugs & Security page for the live reporting links.

Previous

Caching

Use resource and snippet caching deliberately, and remember to disable or clear cache during active development.

Next

Security

Keep the manager protected, use limited permissions, and review legacy code and extras carefully.