Skip to content

Commit 43f1996

Browse files
authored
Merge pull request #690 from aboba/main
Fix normative language issues
2 parents 6185cec + 0f12a6c commit 43f1996

File tree

1 file changed

+9
-4
lines changed

1 file changed

+9
-4
lines changed

index.src.html

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5575,6 +5575,9 @@
55755575
Security Considerations{#security-considerations}
55765576
=================================================
55775577

5578+
<div class=non-normative>
5579+
This section is non-normative.
5580+
55785581
The primary security impact is that features of this API make it easier for an
55795582
attacker to exploit vulnerabilities in the underlying platform codecs.
55805583
Additionally, new abilities to configure and control the codecs can allow for
@@ -5603,14 +5606,16 @@
56035606
exploits being able to read user data.
56045607

56055608
An additional concern is exposing the underlying codecs to input mutation race
5606-
conditions. Specifically, it <em class="rfc2119">SHOULD</em> not be possible for
5607-
a site to mutate a codec input or output while the underlying codec is still
5608-
operating on that data. This concern is mitigated by ensuring that input and
5609-
output interfaces are immutable.
5609+
conditions, such as allowing a site to mutate a codec input or output while
5610+
the underlying codec is still operating on that data. This concern is mitigated
5611+
by ensuring that input and output interfaces are immutable.
56105612

56115613
Privacy Considerations{#privacy-considerations}
56125614
===============================================
56135615

5616+
<div class=non-normative>
5617+
This section is non-normative.
5618+
56145619
The primary privacy impact is an increased ability to fingerprint users by
56155620
querying for different codec capabilities to establish a codec feature profile.
56165621
Much of this profile is already exposed by existing APIs. Such profiles are very

0 commit comments

Comments
 (0)