Mailing List Archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [tlug] Do you whitelist or blacklist utf-8?



On Thu, Feb 24, 2011 at 11:02 AM, Stephen J. Turnbull
<stephen@example.com> wrote:
> Josh Glover writes:

> What you mean is to blacklist possibly syntactic characters and only
> take characters off if you really need them.  In particular, blacklist
> everything in ASCII except for the alphanumeric characters and maybe
> the space.  But non-ASCII characters don't matter most of the time.

Isn't there a vulnerability involving automatic full-width to
half-width conversion? Or would I be paranoid to think that zenkaku
punctuation should be blacklisted as well?

-- 
--Richard Frankum


Home | Main Index | Thread Index

Home Page Mailing List Linux and Japan TLUG Members Links