w3c/manifest

JSON "commonly" encoded in Unicode

Closed this issue · 2 comments

aphillips commented

Privacy and Security
https://w3c.github.io/manifest/#priv-sec

As the manifest format is JSON and will commonly be encoded using [UNICODE], the security considerations described in [JSON] and [UNICODE-SECURITY] apply.

Actually, JSON documents are always encoded in UTF-8 on the wire (they may be decoded into UTF-16 or some other Unicode encoding in memory) and are processed in terms of Unicode, so the word "commonly" should be removed. Note that the references to Unicode and UTS39 should probably use SpecRef.

christianliebel commented

Note that the references to Unicode and UTS39 should probably use SpecRef.

@aphillips Could you explain this a bit more? To me the references look like they are SpecRefs.

aphillips commented

@christianliebel My bad. I didn't realize that UNICODE-SECURITY is a specref defined alias of UTR36.

  • 👍1