@@ -11705,6 +11705,54 @@ <h3>Serializing/Deserializing RDF</h3>
11705
11705
</ section >
11706
11706
</ section >
11707
11707
11708
+ < section id ="security ">
11709
+ < h3 > Security Considerations</ h3 >
11710
+ < p > See, < a href ="#iana-security "> Security Considerations</ a > in < a href ="#iana-considerations " class ="sectionRef "> </ a > .</ p >
11711
+
11712
+ < p class ="note "> Future versions of this specification
11713
+ may incorporate subresource integrity [[?SRI]] as a means of ensuring that cached and retrieved
11714
+ content matches data retrieved from remote servers; see < a href ="https://github.com/w3c/json-ld-syntax/issues/86 "> issue 86</ a > .</ p >
11715
+ </ section >
11716
+
11717
+ < section id ="privacy ">
11718
+ < h3 > Privacy Considerations</ h3 >
11719
+ < p > The retrieval of external contexts can expose the operation of a JSON-LD processor,
11720
+ allow intermediate nodes to fingerprint the client application through introspection of retrieved resources
11721
+ (see [[?fingerprinting-guidance]]), and
11722
+ and provide an opportunity for a man-in-the-middle attack.
11723
+ To protect against this, publishers should consider caching remote contexts for future use,
11724
+ or use the < a data-cite ="JSON-LD11-API#dom-jsonldoptions-documentloader "> documentLoader</ a >
11725
+ to maintain a local version of such contexts.</ p >
11726
+ </ section >
11727
+
11728
+ < section id ="internationalization ">
11729
+ < h3 > Internationalization Considerations</ h3 >
11730
+ < p > As JSON-LD uses the RDF data model, it is restricted by design in its ability to
11731
+ properly record < a > JSON-LD Values</ a > which are < a > strings</ a > with left-to-right or right-to-left direction indicators.
11732
+ Both JSON-LD and RDF provide a mechanism for specifying the language associated with
11733
+ a string (< a > language-tagged string</ a > ), but do not provide a means of indicating
11734
+ the base direction of the string.</ p >
11735
+
11736
+ < p > Unicode provides a mechanism for signaling direction within a string
11737
+ (see < a data-cite ="UAX9 "> Unicode Bidirectional Algorithm</ a > [[UAX9]]),
11738
+ however, when a string has an overall base direction which cannot be determined by the
11739
+ beginning of the string, an external indicator is required,
11740
+ such as the [[HTML]] < a data-cite ="HTML/dom.html#the-dir-attribute "> dir attribute</ a > ,
11741
+ which currently has no counterpart for < a > RDF literals</ a > .</ p >
11742
+
11743
+ < p > The issue of properly representing text direction in RDF is not something that
11744
+ this Working Group can handle, as it is a limitation or the core RDF data model.
11745
+ This Working Group expects that a future RDF Working Group will consider the matter
11746
+ and add the ability to specify the text direction of < a > language-tagged strings</ a > .</ p >
11747
+
11748
+ < p > Until a more comprehensive solution can be addressed in a future version of this
11749
+ specification, publishers should consider this issue when representing strings
11750
+ where the text direction of the string cannot otherwise be correctly inferred
11751
+ based on the content of the string.
11752
+ See [[?string-meta]] for a discussion best practices for
11753
+ identifying language and base direction for strings used on the Web.</ p >
11754
+ </ section >
11755
+
11708
11756
< section class ="appendix informative "> < h2 > Image Descriptions</ h2 >
11709
11757
< section id ="fig-linked-data-graph-descr "> < h3 > Linked Data Dataset</ h3 >
11710
11758
< h2 > Description of the < a href ="#fig-linked-data-graph "> Linked Data Dataset figure</ a > in < a href ="#data-model " class ="sectionRef "> </ a > </ h2 >
@@ -12226,53 +12274,6 @@ <h3>Examples</h3>
12226
12274
</ section >
12227
12275
</ section >
12228
12276
12229
- < section id ="security " class ="appendix ">
12230
- < h3 > Security Considerations</ h3 >
12231
- < p > See, < a href ="#iana-security "> Security Considerations</ a > in < a href ="#iana-considerations " class ="sectionRef "> </ a > .</ p >
12232
- < p > Future versions of this specification
12233
- may incorporate subresource integrity [[?SRI]] as a means of ensuring that cached and retrieved
12234
- content matches data retrieved from remote servers; see < a href ="https://github.com/w3c/json-ld-syntax/issues/86 "> issue 86</ a > .</ p >
12235
- </ section >
12236
-
12237
- < section id ="privacy " class ="appendix ">
12238
- < h3 > Privacy Considerations</ h3 >
12239
- < p > The retrieval of external contexts can expose the operation of a JSON-LD processor,
12240
- allow intermediate nodes to fingerprint the client application through introspection of retrieved resources
12241
- (see [[?fingerprinting-guidance]]), and
12242
- and provide an opportunity for a man-in-the-middle attack.
12243
- To protect against this, publishers should consider caching remote contexts for future use,
12244
- or use the < a data-cite ="JSON-LD11-API#dom-jsonldoptions-documentloader "> documentLoader</ a >
12245
- to maintain a local version of such contexts.</ p >
12246
- </ section >
12247
-
12248
- < section id ="internationalization " class ="appendix ">
12249
- < h3 > Internationalization Considerations</ h3 >
12250
- < p > As JSON-LD uses the RDF data model, it is restricted by design in its ability to
12251
- properly record < a > JSON-LD Values</ a > which are < a > strings</ a > with left-to-right or right-to-left direction indicators.
12252
- Both JSON-LD and RDF provide a mechanism for specifying the language associated with
12253
- a string (< a > language-tagged string</ a > ), but do not provide a means of indicating
12254
- the base direction of the string.</ p >
12255
-
12256
- < p > Unicode provides a mechanism for signaling direction within a string
12257
- (see < a data-cite ="UAX9 "> Unicode Bidirectional Algorithm</ a > [[UAX9]]),
12258
- however, when a string has an overall base direction which cannot be determined by the
12259
- beginning of the string, an external indicator is required,
12260
- such as the [[HTML]] < a data-cite ="HTML/dom.html#the-dir-attribute "> dir attribute</ a > ,
12261
- which currently has no counterpart for < a > RDF literals</ a > .</ p >
12262
-
12263
- < p > The issue of properly representing text direction in RDF is not something that
12264
- this Working Group can handle, as it is a limitation or the core RDF data model.
12265
- This Working Group expects that a future RDF Working Group will consider the matter
12266
- and add the ability to specify the text direction of < a > language-tagged strings</ a > .</ p >
12267
-
12268
- < p > Until a more comprehensive solution can be addressed in a future version of this
12269
- specification, publishers should consider this issue when representing strings
12270
- where the text direction of the string cannot otherwise be correctly inferred
12271
- based on the content of the string.
12272
- See [[?string-meta]] for a discussion best practices for
12273
- identifying language and base direction for strings used on the Web.</ p >
12274
- </ section >
12275
-
12276
12277
< section class ="appendix informative preserve ">
12277
12278
< h4 > Open Issues</ h4 >
12278
12279
< p > The following is a list of issues open at the time of publication.</ p >
0 commit comments