Please add link to HackerOne bug bounty portal to contacts for security issues
We have a bug bounty program for Tor and Tor Browser at HackerOne. We should add a link to it when talking about reporting security bugs on https://www.torproject.org/contact/.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information