some filesystem(cd9660,ntfs,udf) accepts redundant UTF-8

Issue #22 closed
Takehiko NOZAKI repo owner created an issue

RFC3629 added following Security consideration:

Security may also be impacted by a characteristic of several character encodings, including UTF-8: the "same thing" (as far as a user can tell) can be represented by several distinct character sequences.

but our UTF-8 -> UCS implementation for filesystem is too old to check redundant byte sequence.

Comments (6)

  1. Log in to comment