emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Unicode confusables and reordering characters considered harmful, a


From: Gregory Heytings
Subject: Re: Unicode confusables and reordering characters considered harmful, a simple solution
Date: Fri, 05 Nov 2021 23:31:38 +0000


myfun("שָׁלוֹם" ,"السّلامعليكم");

There is no danger in that example, and in particular nothing invisible.

I'm pretty sure an attacker can use the above confusing arg order to turn an apparently harmless program into a security hole.


That's possible indeed, but this is not what the "Trojan Source" paper is about. The example you show is only one instance of the many possible reasons why a piece of code can be difficult to interpret, there are many others, e.g. misleading indentation in code. The point made by the "Trojan Source" paper is only about invisible reordering control characters.
reply via email to

[Prev in Thread] Current Thread [Next in Thread]