Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove unnecessary unicode control characters #38900

Merged
merged 1 commit into from
Dec 8, 2021

Conversation

omajid
Copy link
Member

@omajid omajid commented Dec 8, 2021

https://trojansource.codes/ demonstrated that unicode control characters could be used in attacks. Now most IDEs, editors and code browsers (including GitHub) warn about these.

Delete these from source to remove a source of confusion for anyone going through this code.

The characters were introduced by #32245 and you can see an
example of the warnings shown by GitHub here: https://github.com/dotnet/aspnetcore/blob/69308dafeda51d5301396c88ba9136a6da97c7b6/src/Http/Http/src/Features/FormOptions.cs

https://trojansource.codes/ demonstrated that unicode control
characters could be used in attacks. Now most IDEs, editors and code
browsers (including GitHub) warn about these.

Delete these from source to remove a source of confusion for anyone
going through this code.

The characters were introduced by
dotnet#32245 and you can see an
example of the warnings shown by GitHub here:
https://github.com/dotnet/aspnetcore/blob/69308dafeda51d5301396c88ba9136a6da97c7b6/src/Http/Http/src/Features/FormOptions.cs
@ghost ghost added area-runtime community-contribution Indicates that the PR has been added by a community member labels Dec 8, 2021
@Tratcher Tratcher added this to the 7.0-preview1 milestone Dec 8, 2021
@Tratcher Tratcher enabled auto-merge (squash) December 8, 2021 17:37
@Tratcher
Copy link
Member

Tratcher commented Dec 8, 2021

Thanks

@Tratcher Tratcher self-assigned this Dec 8, 2021
@Tratcher Tratcher merged commit 73db5e4 into dotnet:main Dec 8, 2021
@amcasey amcasey added area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions and removed area-runtime labels Aug 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions community-contribution Indicates that the PR has been added by a community member
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants