The worst thing about UTF-7 is that it has multiple valid representations of the same string. I'm convinced that the primary use of UTF-7 is hiding malicious i

The worst thing about UTF-7 is that it has multiple valid representations of the same string. I'm convinced that the primary use of UTF-7 is hiding malicious input as different characters [1], as a possible exploit against systems that support UTF-7 for no reason. [1] http://nedbatchelder.com/blog/200704/xss_with_utf7.html http://nedbatchelder.com/blog/200704/xss_with_utf7.html