Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This character is interesting, one more thing to watch out for in user-provided input. You do your homework and escape HTML in users' comments but if you don't escape the RTL overrides, their effects can "bleed" to other parts of the page, rendering it unreadable or at least hard to read.


The bleeding over seems to apply to Google's title. In my browser, it shows up as "xoferiF allizoM - hcraeS elgooG"...




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: