Added emoji zwj sequences The following are the recommended emoji zwj sequences, which use a U+200D ZERO WIDTH JOINER (ZWJ) to join the characters into a single glyph if available. When not available, the ZWJ characters are ignored and a fallback sequence of separate emoji is displayed.
Recent Commits to big-list-of-naughty-strings:master
-
Added emoji zwj sequences
-
Merge pull request #206 from mattsparks/master
Merge pull request #206 from mattsparks/master Adding PHP library
-
Merge pull request #207 from eliabieri/master
Merge pull request #207 from eliabieri/master Added C++ library to README
-
Merge pull request #165 from TheJambo/master
Merge pull request #165 from TheJambo/master Added Ogham Text
-
Added Deseret string to JSON
Added Deseret string to JSON
-
added Deseret string
added Deseret string Deseret characters are located within U+010000..U+10FFFF range and use surrogate pairs even in UTF-16, i. e. use two 'words' (erroneously called 'char's in Java).
-
Adds `constructor`
Adds `constructor` `constructor` is the only lowercase identifier that is `in` all JavaScript objects, and can be involved in obscure XSS so can be used to abuse code that uses JavaScript objects as lookup tables. ```js var empty = {}; if ('constuctor' in empty && empty['constructor']) { // runs } empty['constructor']['constructor']('alert(1)')(); // Parses and runs ```