Add a generic check against "dangerous" Unicode codepoints
未关闭
enhancement
- 主要语言
- Java
- 星标
- 5.6k
- 派生
- 559
- 平均合并
- 1 天 14 小时
- 30 天内合并 PR
- 43
描述
It would be nice if spotless could check for (and remove or error out) "dangerous" unicode codepoints.
See today's Rust security advisory: https://blog.rust-lang.org/2021/11/01/cve-2021-42574.html - According to this, the initial list of forbidden codepoints should contain: U+202A, U+202B, U+202C, U+202D, U+202E, U+2066, U+2067, U+2068, U+2069
Additionally, it would be nice to have a similar check against homoglyph attacks, but that is probably a bit more tricky to solve...
贡献指南
调研方向
从 issue #976 和链接的 Rust 安全公告开始,确认列出的九个 codepoint 以及预期的删除或报错行为。查看 Spotless 现有的 check 入口点,以确定通用 Unicode check 应放置的位置;完成的标准是检测出每个列出的 codepoint,并应用所选择的行为。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- java
- 领域
- security, tooling
- Issue 类型
- 功能
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100