diffplug / diffplug/spotless

Add a generic check against "dangerous" Unicode codepoints

Aperta
#976 0 commenti 3 reazioni 0 assegnatari Vedi su GitHub
enhancement
Lingua principale
Java
Stelle
5.6k
Fork
559
Merge medio
1g 13h
PR unite (30g)
34

Descrizione

It would be nice if spotless could check for (and remove or error out) "dangerous" unicode codepoints.

See today's Rust security advisory: https://blog.rust-lang.org/2021/11/01/cve-2021-42574.html - According to this, the initial list of forbidden codepoints should contain: U+202A, U+202B, U+202C, U+202D, U+202E, U+2066, U+2067, U+2068, U+2069

Additionally, it would be nice to have a similar check against homoglyph attacks, but that is probably a bit more tricky to solve...

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.