Detecting malicious Unicode

135 · Daniel Stenberg · May 16, 2025, 7:35 a.m.
cURL and libcurl Git github Security Unicode Security software development code-review
Summary
James Fuller, a curl contributor, presented a significant issue regarding the detection of malicious Unicode characters in scripts, highlighting how neither human reviewers nor CI jobs identified the vulnerabilities. This post delves into the implications of this oversight and the importance of addressing such security risks in software development.
Read full post on daniel.haxx.se →
AUTHOR
BLOG POST FEATURED ON

Placeholder image
r/programming

84 points

Placeholder image
Hacker News

37 points

Add this plugin to your blog