rdf-canonize icon indicating copy to clipboard operation
rdf-canonize copied to clipboard

Fail closed by default on deep recursion when canonizing bnode labels

Open dlongley opened this issue 2 years ago • 0 comments

If deep recursion occurs when determining the canonical labels for blank nodes, we should bail out by default instead of continuing until all blank nodes receive their canonical labels. Since the recursion can be a slower than normal process and is extremely non-typical in useful data, we should require the developer to pass a flag to allow the algorithm to execute in these cases. This creates a stronger security-minded posture, enabling the library to "fail closed" by default when encountering such data.

dlongley avatar Aug 23 '22 15:08 dlongley