mirror of
https://github.com/RGBCube/serenity
synced 2026-01-15 06:01:00 +00:00
This rule attempts to flag invisible Unicode characters which would potentially be used by an attacker to hide code that humans can't see. https://pvs-studio.com/en/docs/warnings/v1076/ AKA the "Trojan Source" attack: https://arxiv.org/abs/2111.00169 Unfortunately our `LibUnicode` source code contains these hidden characters as they are part of the Unicode character set that the library exposes. So we have, and will always have 100s of false positives. |
||
|---|---|---|
| .. | ||
| cmake.yml | ||
| discord.yml | ||
| libjs-test262.yml | ||
| lintcommits.yml | ||
| manpages.yml | ||
| pvs-studio-static-analysis.yml | ||
| sonar-cloud-static-analysis.yml | ||
| twitter.yml | ||