| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
qt: "/../" injection
(Log in to post comments)
qt: "/../" injection Posted Apr 9, 2007 1:55 UTC (Mon) by jengelh (subscriber, #33263) [Link] Funny how this could happen, given that the UTF-8 spec [or its summary description on internet pages, respectively] say that overlong sequences should be rejected to exactly not run into this problem.
UTF-8 redundancy Posted Apr 12, 2007 11:39 UTC (Thu) by ldo (subscriber, #40946) [Link] As I recall, the proscription against the use of redundant UTF-8 encodings was not in the original spec, it was added later when it became apparent that it broke security code that was doing pattern matches against a bytestream without understanding that it was UTF-8 encoded. Personally, I have a fondness for encodings that avoid such redundancies altogether.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||