---
id: 10280
title: "Unicode surrogates conversion to (simplified) replacement characters"
source_domain: lab.ctbb.show
source_url: "https://lab.ctbb.show/research/unicode-surrogates-to-replacement-characters"
published_at: "2025-11-10T00:00:00Z"
tags: ["web-security", "unicode", "surrogate", "conversion"]
phying_url: "https://phying.com/item/10280"
lang: en
---

# Unicode surrogates conversion to (simplified) replacement characters

## Summary

A case for question-mark smuggle: using Unicode surrogates to bypass input validation with replacement character fallback.

## Intelligence Metadata

- **Sources:** lab.ctbb.show
- **Published:** 2025-11-10T00:00:00Z
- **Original:** https://lab.ctbb.show/research/unicode-surrogates-to-replacement-characters
- **Phying News:** https://phying.com/item/10280