Unverified50% confidenceFactExact time
Punycode encoding is represented as an ASCII string beginning with xn--, used for DNS queries; for example, münchen.de is encoded as xn--mnchen-3ya.de.
1
Sources
50%
Confidence
Long-term
Relevance
11/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPunycode is an encoding scheme defined in RFC 3492 that converts internationalized domain names containing Unicode characters into pure ASCII strings.70% similarUnverifiedIn the original implementation, even a pure ASCII letter (such as s) goes through the complete Unicode property lookup path: first decode, then consult the 1567-character table, then pass into the normalization pipeline.65% similarUnverifiedThe ASCII Smuggling attack exploits Unicode Tag Characters (the U+E0000 block) to encode invisible ASCII text as a carrier for injection instructions.63% similarUnverifiedVulnerability fixed in 3.0.1: claims comparing ASTs or bytecode could still pass via the comment canary; subsequently the canary added no-op assignments to change the syntax tree and bytecode, but this was a partial fix, and claims that read only a smaller fragment of the syntax tree could still pass.56% similarUnverifiedLlamaIndex provides a CodeSplitter that parses with tree-sitter and by default limits chunks to 1500 characters in the source code.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1123118API
curl https://kongchang.com/api/v1/knowledge/claims/1123118MCP
get_claim(id=1123118)