buildSecurityTxt (seo/security-txt.ts)

Generates security.txt response for well-known path.

// Source: https://github.com/appwrite/appwrite | License: BSD-3-Clause | Copyright 2019 Appwrite (https://appwrite.io) and individual contributors
// Provided via justclaw.it.com; keep this notice with the code.
import { normalizeWellKnownPath } from './change-password-url.ts'
import { CANONICAL_HOST } from './indexing.ts'

/**
 * RFC 9116 security.txt: where researchers report vulnerabilities and abuse.
 *
 * @see https://www.rfc-editor.org/rfc/rfc9116
 */
export const SECURITY_TXT_WELL_KNOWN_PATH = '/.well-known/security.txt'

const EXPIRES_AFTER_DAYS = 365

/**
 * Pinned to the public origin: behind TLS termination the request origin can be
 * internal HTTP, and RFC 9116 clients reject a file fetched from a URL missing
 * from its Canonical entries.
 */
const CANONICAL_URL = `https://$

... (truncated -- full source via MCP)