JSON "commonly" encoded in Unicode

[aphillips]

Privacy and Security
https://w3c.github.io/manifest/#priv-sec

As the manifest format is JSON and will commonly be encoded using [UNICODE], the security considerations described in [JSON] and [UNICODE-SECURITY] apply.

Actually, JSON documents are always encoded in UTF-8 on the wire (they may be decoded into UTF-16 or some other Unicode encoding in memory) and are processed in terms of Unicode, so the word "commonly" should be removed. Note that the references to Unicode and UTS39 should probably use SpecRef.

[christianliebel]

Note that the references to Unicode and UTS39 should probably use SpecRef.

@aphillips Could you explain this a bit more? To me the references look like they are SpecRefs.

[aphillips]

@christianliebel My bad. I didn't realize that UNICODE-SECURITY is a specref defined alias of UTR36.