From 0a895f153e61644e11b5dc07dd8e8d80662f7142 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Sat, 3 Aug 2024 13:51:23 +0530
Subject: [PATCH] Add a note to the spec that terminals must sanitize
 identifiers

---
 docs/desktop-notifications.rst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/desktop-notifications.rst b/docs/desktop-notifications.rst
index 46efb52e1..cb7e61f9e 100644
--- a/docs/desktop-notifications.rst
+++ b/docs/desktop-notifications.rst
@@ -532,3 +532,10 @@ Any string consisting solely of characters from the set ``[a-zA-Z0-9_-+.]``,
 that is, the letters ``a-z``, ``A-Z``, the underscore, the hyphen, the plus
 sign and the period. Applications should make these globally unique, like a
 UUID for maximum robustness.
+
+
+.. important::
+   Terminals **must** sanitize ids received from client programs before sending
+   them back in responses, to mitigate input injection based attacks. That is, they must
+   either reject ids containing characters not from the above set, or remove
+   bad characters when reading ids sent to them.