5 ms·
I don't quite understand the purpose of this list. It contains potentially malicious input, but also emoticons based on Unicode characters that are completely h
by 13415 6y ago
I don't quite understand the purpose of this list. It contains potentially malicious input, but also emoticons based on Unicode characters that are completely harmless and used in every second post on Reddit.
- kube-system 6y agoI think the purpose is to run these strings through your inputs and make sure it doesn’t behave in unexpected ways.
- minimaxir 6y agoI made the list while I was a Software QA Engineer at Apple, since there were a bunch of fun Unicode strings causing particular issues there, which gave me the idea.
- Dylan16807 6y agoThere's a lot of ways to mishandle unicode. Checking that non-BMP characters work, that emojis in various sections work, and that emojis with modifiers work are all good tests.
- MauranKilom 6y agoIt's essentially a test suite for character encoding all throughout your application. If you input all those strings (e.g. send chat message) and they arrive incorrectly at some other end (e.g. other user receiving chat message) then there's a problem somewhere.
- 13415 6y agoThat makes sense. Thanks a lot! Of course, it's very useful for testing. I erroneously assumed it was for input validation.
- toomanybeersies 6y agoIt's useful for testing a variety of things that take text/string inputs, such as forms in web applications. It's a handy tool for testing a site (preferably one you have permission to test) for XSS or SQL injection, character encoding problems, or even just form length problems.