Simon Willison’s Weblog

Understanding Bidirectional (BIDI) Text in Unicode. It turns out you need to sanitise user input to ensure there are no unicode characters that switch your site’s regular text to RTL.

# 15th March 2009, 4:37 am / unicode, security, bidi, filtering, userinput, calhenderson