Skip to content

Add security consideration for serialization of numbers #343

@msporny

Description

@msporny

Text needs to be added to the security consideration section to warn developers that using certain classes of numbers will result in a lack of interoperability. We should point to at least the following specifications:

Guidance provided should be:

  • Express arbitrary precision numbers (decimals, floats), as strings.
  • Express integers larger than what a 32-bit architecture can support as strings.
  • Fractions expressed as decimals/floats almost inevitably lead to interoperability issues.
  • Note that not all architectures follow IEEE 754 precision guidelines (CUDA).
  • Note that implementations MAY provide features that help developers avoid these interoperability issues.

Metadata

Metadata

Assignees

Labels

editorialThis issue or PR constitutes an editorial change.ready for prThis issue is ready to be resolved via a pull request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions