Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider tests that perform input context validation #88

Open
msporny opened this issue Jul 16, 2024 · 0 comments
Open

Consider tests that perform input context validation #88

msporny opened this issue Jul 16, 2024 · 0 comments

Comments

@msporny
Copy link
Member

msporny commented Jul 16, 2024

From w3c/vc-data-integrity#272 (comment), @decentralgabe wrote:

Ensure the DI test suites include specific checks for these vulnerabilities, ensuring conformant implementations handle them correctly. This will be tough if we do not make strong normative statements about (1) and (2) above, but we can at least note conformance for implementers who have chosen to follow the guidance.

Both the VCDM and DI specifications might contain new normative statements that require checking of context values. The checks probably make more sense in the VCDM v2.0 test suite than they do the DI test suite. This issue is being raised to ensure that we consider the tests in both test suites.

There is a duplicate issue raised in w3c-ccg/data-integrity-test-suite-assertion#65.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants
@msporny and others