Curated security research, vulnerabilities, advisories and tools for practitioners.

Unicode surrogates conversion to (simplified) replacement characters

Summary

A case for question-mark smuggle: using Unicode surrogates to bypass input validation with replacement character fallback.
Published
Collected