It doesn't mention my favorite Unicode attack, which is using UTF-7 to evade content filters or fool heuristic encoding-sniffers: http://security-sh3ll.blogspo

It doesn't mention my favorite Unicode attack, which is using UTF-7 to evade content filters or fool heuristic encoding-sniffers: http://security-sh3ll.blogspot.com/2009/05/exploiting-ie8-utf-7-xss-vulnerability.html http://security-sh3ll.blogspot.com/2009/05/exploiting-ie8-ut...