5 ms·
and "that's it"? I mean, it does sound like it might introduce unexpected UI behaviour, but are there any other more serious / dangerous consequences?
by develatio 1y ago
and "that's it"? I mean, it does sound like it might introduce unexpected UI behaviour, but are there any other more serious / dangerous consequences?
- JimDabell 1y agoMaking any page that mentions you – including admin pages that might be used to disable your account – become unreadable is bad enough. Another comment linked to this: https://trojansource.codes https://trojansource.codes
- yencabulator 1y agoOne of my pet peeves is when UIs don't clearly constrain and delineate the extent of user-controlled text. Plenty of phishing attacks have relied on having attacker-controlled input seem authoritative, e.g. getting gmail to repeat back something to the victim.
- LikesPwsh 1y agoRTL lets you obfuscate file extensions. E.g. Annexe.txt (that you might assume would be safely opened by a text editor) could actually be Ann\u202Etxt.exe, a dangerous executable.
- immibis 1y agoYes, dangerous consequences of unexpected UI behaviour: imagine writing a URL backwards with a right-to-left override, and it clearly says www.yourbank.example but it goes to www.evilsite.example/example.yourbank.www