Monthly Archives: May 2009

Major applications fail to include full Unicode support

Posted on May 23, 2009 by Chris Weber

As I’ve found with most of the major Web-apps out there, including social media giants like Facebook and others, Unicode support is far from complete. I’m not a big MySQL guy, but have been building some stuff lately and ran … Continue reading →

Posted in Unicode | Leave a comment

Advisory: International Components for Unicode CVE-2009-0153

Posted on May 15, 2009 by Chris Weber

Big ones from Apple today: http://support.apple.com/kb/HT3549 CVE-ID: CVE-2009-0153 Available for: Mac OS X v10.5 through v10.5.6, Mac OS X Server v10.5 through v10.5.6 Impact: Maliciously crafted content may bypass website filters and result in cross-site scripting Description: An implementation issue … Continue reading →

Posted in advisory | Tagged | Leave a comment

Unicode security attacks and test cases – Best-fit mappings and String transformations

Posted on May 7, 2009 by Chris Weber

Best-fit mappings are another complex topic in Unicode, easily overlooked or misunderstood.  On the defensive side, if you can only remember two things: Converting to Unicode is safe. Converting between legacy character sets is dangerous. Ah forget it, unfortunately it’s … Continue reading →

Posted in Unicode, security, testing | Tagged | 1 Comment