Mozilla runs a Discourse instance with numerous customizations applied on top, so issues with discourse.mozilla.org can be a result of upstream bugs or our own configuration and code.
Mozilla-specific issues
Issues specific to discourse.mozilla.org and its code and configuration should be filed on GitHub: https://github.com/mozilla/discourse/issues
Mozilla-specific security issues
Security issues specific to discourse.mozilla.org should be filed on Bugzilla:
https://bugzilla.mozilla.org/form.web.bounty
Upstream issues
General issues relating to Discourse should be filed upstream: https://meta.discourse.org/c/bug
Please invite me to the topic upstream (my username is @LeoMcA).
If you’re in doubt about whether an issue is upstream or mozilla-specific, file it as a mozilla-specific issue and we can triage it.
Upstream security issues
Upstream security issues should be filed on HackerOne: https://hackerone.com/discourse
Please also file a security issue with us so we can keep track of it, following the process noted above. Please say that you’ve filed the issue upstream so we don’t ourselves.