Re: master ce63f91025: Add textsec functions for verifying email addresses

[Lars Ingebrigtsen]

Eli Zaretskii <eliz@gnu.org> writes:

> Yes, using the Unicode security guidelines would produce unnecessary
> false positives.  Which could be OK for paranoid minds, I guess, who
> are afraid of any bidi controls, even if they don't actually affect
> the display order.  Like in this example:
>
>      "אבגד ⁧שונה⁩ מרגיל"
>
> I do hope we will eventually offer separate functions to do that with
> fewer false positives (or a way of customizing these textsec functions
> to do that).

It seems save to allow names that pass
bidi-find-overridden-directionality ...  but is there an off-by-one
error there?

It says that this is OK:

           "Lars Ingebrigtsen\N{LEFT-TO-RIGHT OVERRIDE}"

But this isn't:

           "Lars Ingebrigtsen\N{LEFT-TO-RIGHT OVERRIDE}f"

And both are equally suspicious.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no