‘Trojan Source’ Bug Threatens the Security of All Code

Re:‘Trojan Source’ Bug Threatens the Security of All Code by josephcsible on Tuesday November 02, 2021 @02:16AM (#29077700)

I personally wish that in repos with the warning enabled, that the �s were displayed in lieu of the malicious characters instead of in addition to them. For example, I'd rather see this:

          var accessLevel = "user";
          if (accessLevel != "user� �// Check if admin� �") {
              console.log("You are an admin.");
          }

than this:

          var accessLevel = "user";
          if (accessLevel != "user�") {� // Check if admin�� 
              console.log("You are an admin.");
          }

[ Parent | on HN ]

Re:‘Trojan Source’ Bug Threatens the Security of All Code by robotmay on Tuesday November 02, 2021 @07:47AM (#29079839)

Is that possible to do using CSS with our existing markup? Currently we prepend the � using ::before. I imagine we could probably hide the existing character and shuffle the � over where it should be, but it might need some testing across different text sizes I imagine. I'll make a note of it for our next revision :)

[ Parent | on HN ]

Re:‘Trojan Source’ Bug Threatens the Security of All Code by josephcsible on Wednesday November 03, 2021 @01:08AM (#29091296)

I don't think what I want is possible with a pure-CSS solution, but I'm not 100% sure.

[ Parent | on HN ]