next.js

docs: update Security section to direct disclosures

#84156

Merged