Always set base to null; do not allow relative URLs or terms.

digitalbazaar · Aug 23, 2022 · ab5ba46 · ab5ba46
1 parent d17c390
commit ab5ba46
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/suites/LinkedDataSignature.js b/lib/suites/LinkedDataSignature.js
@@ -205,8 +205,12 @@ module.exports = class LinkedDataSignature extends LinkedDataProof {
     }
     return jsonld.canonize(input, {
       algorithm: 'URDNA2015',
+      // do not resolve any relative URLs or terms, throw errors instead
+      base: null,
       format: 'application/n-quads',
       documentLoader,
+      // throw errors if any values would be dropped due to missing
+      // definitions or relative URLs
       safe: true,
       skipExpansion,
       useNative: this.useNativeCanonize