volution / z-tokens

z-tokens -- random tokens generation and related tools
78 stars 2 forks source link

Normalize all string inputs according to a particular Unicode rule #38

Open cipriancraciun opened 3 days ago

cipriancraciun commented 3 days ago

At the moment, any user-provided string inputs (i.e. passwords, additional data, etc.) is used as is, without any form of Unicode normalization.

In order to ensure security and portability, all input strings (that are a superset of ASCII) should be normalized according to a canonical rule.

See the following two issues which stemmed this issue:

cipriancraciun commented 3 days ago