Kjell is right: we need to have a process for communicating important security announcements like this.
I propose a separate security forum, that is only for security updates and warnings. I know nobody likes having separate forums because it can fragment conversations, but the advantage is that nobody should have to follow any of the other forums if they only want security updates. And security updates are pretty manditory.
You don't need to disable all HTML, Kjell, just not allow * for HTML.
Is this something that the OCT is willing to discuss and make some decisions about?
