Unicode: The Hero or Villain? Input Validation of Free-Form Unicode Text in Web Applications

Explore the complexities and benefits of Unicode in web application input validation through this conference talk from OWASP AppSec EU 2018. Delve into the challenges of validating free-form Unicode text and discover how Unicode can be leveraged as a powerful tool for robust input validation. Learn about Unicode normalization, canonicalization, and character classes, and how these concepts can be applied to strengthen your application's defenses. Dispel common misconceptions about Unicode input validation and gain practical insights to implement bulletproof validation techniques in your web applications.

Unicode: The hero or villain? - Paweł Krawczyk