Unicode
Unicode is the universal character encoding standard for modern computing, with UTF-8 as its most widely used encoding form. It supports characters from all major world languages and has become the standard character encoding scheme for modern terminal environments.
Core Facts
Unicode defines multiple zero-width characters, such as U+200B (zero-width space), U+200C (zero-width non-joiner), U+200D (zero-width joiner), and U+FEFF (zero-width no-break space)
As of its latest version, Unicode has included more than 150,000 characters.
Timeline (last 90 days)
Characters outside the Basic Multilingual Plane (such as most emoji) become surrogate pairs consisting of two escape sequences when processed by ensure_ascii escaping.
Typical techniques for linguistic illegibility attacks include replacing sensitive vocabulary with Unicode variant characters, mixing multiple languages, using low-resource languages to bypass filters, and fragmenting harmful intent across multiple conversation turns.
The underlying text content in web pages and documents remains standard Unicode character encoding; fonts only determine the visual rendering of characters, not their storage.
ASCII smuggling leverages special characters in the Unicode character set, including zero-width characters, control characters, and Unicode tag characters (in the range U+E0000 to U+E007F).
Defending against ASCII smuggling requires anomalous Unicode character detection, character normalization processing, and the stripping of invisible characters and tag characters at the email gateway level.
These invisible characters are not displayed in most email clients but exist in the byte stream of the text.
The family emoji "👨👩👧👦" is composed of 7 Unicode code points, namely four person emojis connected in series by three zero-width joiners (U+200D).
The URL specification RFC 3986 stipulates that only a subset of ASCII characters is allowed in URLs, and non-ASCII characters must be percent-encoded to be used legally.
Modern terminal emulators support 256 colors or even 24-bit true color, combined with the Unicode extended character set
零宽字符是Unicode标准中一组特殊控制字符，包括零宽空格（U+200B）、零宽连接符（U+200D）、零宽非连接符（U+200C）、左至右标记（U+200E）等，视觉上完全不可见但在字节层面真实存在
3 more timeline events
All Facts (14)
Unicode defines multiple zero-width characters, such as U+200B (zero-width space), U+200C (zero-width non-joiner), U+200D (zero-width joiner), and U+FEFF (zero-width no-break space)
80%VerifiedAs of its latest version, Unicode has included more than 150,000 characters.
65%UnverifiedGB2312标准收录6,763个汉字，Unicode中的CJK统一表意文字超过9万个
90%UnverifiedCharacters outside the Basic Multilingual Plane (such as most emoji) become surrogate pairs consisting of two escape sequences when processed by ensure_ascii escaping.
50%UnverifiedTypical techniques for linguistic illegibility attacks include replacing sensitive vocabulary with Unicode variant characters, mixing multiple languages, using low-resource languages to bypass filters, and fragmenting harmful intent across multiple conversation turns.
50%UnverifiedThe underlying text content in web pages and documents remains standard Unicode character encoding; fonts only determine the visual rendering of characters, not their storage.
50%UnverifiedASCII smuggling leverages special characters in the Unicode character set, including zero-width characters, control characters, and Unicode tag characters (in the range U+E0000 to U+E007F).
50%UnverifiedThese invisible characters are not displayed in most email clients but exist in the byte stream of the text.
50%UnverifiedDefending against ASCII smuggling requires anomalous Unicode character detection, character normalization processing, and the stripping of invisible characters and tag characters at the email gateway level.
50%UnverifiedThe family emoji "👨👩👧👦" is composed of 7 Unicode code points, namely four person emojis connected in series by three zero-width joiners (U+200D).
50%UnverifiedThe URL specification RFC 3986 stipulates that only a subset of ASCII characters is allowed in URLs, and non-ASCII characters must be percent-encoded to be used legally.
50%UnverifiedModern terminal emulators support 256 colors or even 24-bit true color, combined with the Unicode extended character set
50%Unverified零宽字符是Unicode标准中一组特殊控制字符，包括零宽空格（U+200B）、零宽连接符（U+200D）、零宽非连接符（U+200C）、左至右标记（U+200E）等，视觉上完全不可见但在字节层面真实存在
50%UnverifiedTrojan Source攻击利用Unicode双向文本控制字符（如RLO等），使代码在编辑器显示与编译器解析时呈现不同逻辑，从而植入难以察觉的后门
50%