dotnet / dotnet/dotnet-api-docs

Security Decisions

Open
#853 0 comments 1 reaction 0 assignees View on GitHub
area-System.Globalization dotnet-api/prod Pri2
Dominant language
C#
Stars
949
Forks
1.7k
Avg merge
3d 27m
Merged PRs (30d)
49

Description

When it comes to security decisions, why shouldn't we use the invariant culture? If the invariant culture is assumed to be static (does not change with .NET framework, OS version, user settings, etc.), then why not use it here?

I understand that Ordinal might be better here it terms of performance? But what is the specific problem regarding the invariant culture? Is there are way that the invariant culture gives different results at different times?

---
#### Document Details

⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*

* ID: 4240c9f3-b76e-caf4-4ce0-456d96f52c66
* Version Independent ID: 53632827-9968-aba9-e9e3-8803c8c39779
* Content: [CultureInfo.InvariantCulture Property (System.Globalization)](https://docs.microsoft.com/en-us/dotnet/api/system.globalization.cultureinfo.invariantculture?redirectedfrom=MSDN&view=netframework-4.7.2#System_Globalization_CultureInfo_InvariantCulture)
* Content Source: [xml/System.Globalization/CultureInfo.xml](https://github.com/dotnet/dotnet-api-docs/blob/master/xml/System.Globalization/CultureInfo.xml)
* Product: **dotnet-api**
* GitHub Login: @dotnet-bot
* Microsoft Alias: **dotnetcontent**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.