Skip to content

Commit fbe9ae3

Browse files
committed
Make security, privacy and internationalization sections regular sections and not appendices.
1 parent ee35b4c commit fbe9ae3

File tree

1 file changed

+48
-47
lines changed

1 file changed

+48
-47
lines changed

index.html

Lines changed: 48 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -11705,6 +11705,54 @@ <h3>Serializing/Deserializing RDF</h3>
1170511705
</section>
1170611706
</section>
1170711707

11708+
<section id="security">
11709+
<h3>Security Considerations</h3>
11710+
<p>See, <a href="#iana-security">Security Considerations</a> in <a href="#iana-considerations" class="sectionRef"></a>.</p>
11711+
11712+
<p class="note">Future versions of this specification
11713+
may incorporate subresource integrity [[?SRI]] as a means of ensuring that cached and retrieved
11714+
content matches data retrieved from remote servers; see <a href="https://github.com/w3c/json-ld-syntax/issues/86">issue 86</a>.</p>
11715+
</section>
11716+
11717+
<section id="privacy">
11718+
<h3>Privacy Considerations</h3>
11719+
<p>The retrieval of external contexts can expose the operation of a JSON-LD processor,
11720+
allow intermediate nodes to fingerprint the client application through introspection of retrieved resources
11721+
(see [[?fingerprinting-guidance]]), and
11722+
and provide an opportunity for a man-in-the-middle attack.
11723+
To protect against this, publishers should consider caching remote contexts for future use,
11724+
or use the <a data-cite="JSON-LD11-API#dom-jsonldoptions-documentloader">documentLoader</a>
11725+
to maintain a local version of such contexts.</p>
11726+
</section>
11727+
11728+
<section id="internationalization">
11729+
<h3>Internationalization Considerations</h3>
11730+
<p>As JSON-LD uses the RDF data model, it is restricted by design in its ability to
11731+
properly record <a>JSON-LD Values</a> which are <a>strings</a> with left-to-right or right-to-left direction indicators.
11732+
Both JSON-LD and RDF provide a mechanism for specifying the language associated with
11733+
a string (<a>language-tagged string</a>), but do not provide a means of indicating
11734+
the base direction of the string.</p>
11735+
11736+
<p>Unicode provides a mechanism for signaling direction within a string
11737+
(see <a data-cite="UAX9">Unicode Bidirectional Algorithm</a> [[UAX9]]),
11738+
however, when a string has an overall base direction which cannot be determined by the
11739+
beginning of the string, an external indicator is required,
11740+
such as the [[HTML]] <a data-cite="HTML/dom.html#the-dir-attribute">dir attribute</a>,
11741+
which currently has no counterpart for <a>RDF literals</a>.</p>
11742+
11743+
<p>The issue of properly representing text direction in RDF is not something that
11744+
this Working Group can handle, as it is a limitation or the core RDF data model.
11745+
This Working Group expects that a future RDF Working Group will consider the matter
11746+
and add the ability to specify the text direction of <a>language-tagged strings</a>.</p>
11747+
11748+
<p>Until a more comprehensive solution can be addressed in a future version of this
11749+
specification, publishers should consider this issue when representing strings
11750+
where the text direction of the string cannot otherwise be correctly inferred
11751+
based on the content of the string.
11752+
See [[?string-meta]] for a discussion best practices for
11753+
identifying language and base direction for strings used on the Web.</p>
11754+
</section>
11755+
1170811756
<section class="appendix informative"><h2>Image Descriptions</h2>
1170911757
<section id="fig-linked-data-graph-descr"><h3>Linked Data Dataset</h3>
1171011758
<h2>Description of the <a href="#fig-linked-data-graph">Linked Data Dataset figure</a> in <a href="#data-model" class="sectionRef"></a></h2>
@@ -12226,53 +12274,6 @@ <h3>Examples</h3>
1222612274
</section>
1222712275
</section>
1222812276

12229-
<section id="security" class="appendix">
12230-
<h3>Security Considerations</h3>
12231-
<p>See, <a href="#iana-security">Security Considerations</a> in <a href="#iana-considerations" class="sectionRef"></a>.</p>
12232-
<p>Future versions of this specification
12233-
may incorporate subresource integrity [[?SRI]] as a means of ensuring that cached and retrieved
12234-
content matches data retrieved from remote servers; see <a href="https://github.com/w3c/json-ld-syntax/issues/86">issue 86</a>.</p>
12235-
</section>
12236-
12237-
<section id="privacy" class="appendix">
12238-
<h3>Privacy Considerations</h3>
12239-
<p>The retrieval of external contexts can expose the operation of a JSON-LD processor,
12240-
allow intermediate nodes to fingerprint the client application through introspection of retrieved resources
12241-
(see [[?fingerprinting-guidance]]), and
12242-
and provide an opportunity for a man-in-the-middle attack.
12243-
To protect against this, publishers should consider caching remote contexts for future use,
12244-
or use the <a data-cite="JSON-LD11-API#dom-jsonldoptions-documentloader">documentLoader</a>
12245-
to maintain a local version of such contexts.</p>
12246-
</section>
12247-
12248-
<section id="internationalization" class="appendix">
12249-
<h3>Internationalization Considerations</h3>
12250-
<p>As JSON-LD uses the RDF data model, it is restricted by design in its ability to
12251-
properly record <a>JSON-LD Values</a> which are <a>strings</a> with left-to-right or right-to-left direction indicators.
12252-
Both JSON-LD and RDF provide a mechanism for specifying the language associated with
12253-
a string (<a>language-tagged string</a>), but do not provide a means of indicating
12254-
the base direction of the string.</p>
12255-
12256-
<p>Unicode provides a mechanism for signaling direction within a string
12257-
(see <a data-cite="UAX9">Unicode Bidirectional Algorithm</a> [[UAX9]]),
12258-
however, when a string has an overall base direction which cannot be determined by the
12259-
beginning of the string, an external indicator is required,
12260-
such as the [[HTML]] <a data-cite="HTML/dom.html#the-dir-attribute">dir attribute</a>,
12261-
which currently has no counterpart for <a>RDF literals</a>.</p>
12262-
12263-
<p>The issue of properly representing text direction in RDF is not something that
12264-
this Working Group can handle, as it is a limitation or the core RDF data model.
12265-
This Working Group expects that a future RDF Working Group will consider the matter
12266-
and add the ability to specify the text direction of <a>language-tagged strings</a>.</p>
12267-
12268-
<p>Until a more comprehensive solution can be addressed in a future version of this
12269-
specification, publishers should consider this issue when representing strings
12270-
where the text direction of the string cannot otherwise be correctly inferred
12271-
based on the content of the string.
12272-
See [[?string-meta]] for a discussion best practices for
12273-
identifying language and base direction for strings used on the Web.</p>
12274-
</section>
12275-
1227612277
<section class="appendix informative preserve">
1227712278
<h4>Open Issues</h4>
1227812279
<p>The following is a list of issues open at the time of publication.</p>

0 commit comments

Comments
 (0)