THREATOPS
THREAT OPSThreat News › Bypassing character blocklists with unicode overflows

Bypassing character blocklists with unicode overflows

infoportswigger_researchPublished 2025-01-28

Unicode codepoint truncation - also called a Unicode overflow attack - happens when a server tries to store a Unicode character in a single byte. Because the maximum value of a byte is 255, an overflo

Original source: https://portswigger.net/research/bypassing-character-blocklists-with-unicode-overflows