Cure53🔓cure53@infosec.exchange
Jun 23, 2025, 10:41 AM@bagder True, we are lucky with our - in that regard - niche software because either the JavaScript alert pops or it doesn't, and if it doesn't, well - likely no bug.
But in other projects, that phase certainly demands for way more time than the actual fix/patch itself.
Likely complicated to address without aforementioned committee or any other competent entity accompanying the whole triaging process.