3 ms·
What if you were scraping a webpage and it reported its encoding as UTF-7?
by doki_pen 13y ago
What if you were scraping a webpage and it reported its encoding as UTF-7?
- mattdeboard 13y ago...which is, in fact, exactly how this bug was exposed.
- gsnedders 13y agoModern browsers don't support UTF-7 any more after a number of XSS attacks relying on inserting UTF-7 encoded script elements which then cause the document to be sniffed as UTF-7. The only place UTF-7 is still widely used is in email clients.