Skip to content

Commit ed9b56c

Browse files
authored
Note Unicode sequences in Security Considerations (#851)
Fix #837
1 parent 9b84267 commit ed9b56c

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

index.bs

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -629,6 +629,8 @@ The API design minimizes the attack surface for the compiled computational graph
629629

630630
Purpose-built Web APIs for measuring high-resolution time mitigate against timing attacks using techniques such as resolution reduction, adding jitter, detection of abuse and API call throttling [[hr-time-3]]. The practical deployment of WebNN implementations are likely to bring enough jitter to make timing attacks impractical (e.g. because they would use IPC) but implementers are advised to consider and test their implementations against timing attacks.
631631

632+
Note: Security risks related to Unicode sequences are discussed in context of the {{MLOperatorOptions/label}} {{USVString}} definition.
633+
632634
## Guidelines for new operations ## {#security-new-ops}
633635

634636
*This section is non-normative.*

0 commit comments

Comments
 (0)