On wikibase.cloud wikis a robots.txt gets served, in order to express expected behaviour of scripts and bots with good intentions.

Similarly, on the web there exists a generally known place where to look for contact details for ethical security researchers: security.txt

Required are at least two fields:

• a contact email address
• an expiry date for the provided information

more information: https://securitytxt.org/

helpful links:

• https://en.wikipedia.org/wiki/Security.txt
• https://datatracker.ietf.org/doc/html/rfc8615

ACs:

• relevant information can be accessed via HTTPS in plaintext
  • for the platform UI
    • https://wikibase.cloud/security.txt
    • https://wikibase.cloud/.well-known/security.txt
  • for hosted wikis
    • (example) https://coffeebase.wikibase.cloud/security.txt
    • (example) https://coffeebase.wikibase.cloud/.well-known/security.txt
  • for hosted wikis with custom domains
    • (example) https://wikibae.de/security.txt
    • (example) https://wikibae.de/.well-known/security.txt