Web Neural Network API 2025-03-20 > 2025-06-20

[anssiko]

• name of spec to be reviewed: Web Neural Network API

• URL of spec: https://www.w3.org/TR/webnn/

• Does your document have an in-line Security Considerations section, separate from Privacy Considerations?

  • yes, see Security Considerations

• What and when is your next expected transition?

  • We expect CRS in Q2 2025

• What has changed since any previous review? See Other comments

• Please point to the results of your own self-review:

  • questionnaire responses and discussion

• Where and how to file issues arising?

  • w3c/webnn issues

• Pointer to any explainer for the spec?

  • explainer

Other comments:

This API has received security review in 2022 and 2024.

The specification has also continued to receive Chrome security team review as part of the implementation effort, following the initial Chrome security team review focused on the specification text.

The group has addressed all but one security-tracker issues reported. The remaining open issue is proposed to be addressed by new conformance tests which explicitly perform out-of-bounds access. In part for this purpose, the API has added new errors to to detect if the context is no longer available to fulfill requests e.g. due to a crash or other malfunction.

Further suggestions from security reviewers are welcome in particular for appropriate conformance tests for hardening possible failure paths.