Is there any benefit to normalize unicode/utf-8 names that I am overlooking?

Reading how Spotify was normalizing unicode inconsistently, and now I’m questioning if I am overlooking any issue on accepting non-normalized usernames.
From what I can tell, lowercase was first used on unix because users had to log in fro… Continue reading Is there any benefit to normalize unicode/utf-8 names that I am overlooking?

Is OK to accept multibyte unicode codepoints as recipient address for Sendmail and Postfix?

I am working on a server software that receives an utf-8 encoded email address to send an email to.
I permit multibyte unicode characters (emoji etc.). Then I pass that email address to Sendmail to send an email with Postfix.
Is that dange… Continue reading Is OK to accept multibyte unicode codepoints as recipient address for Sendmail and Postfix?

Are "Pop Directional Formatting" and "Left-to-Right Override" unicode characters a possible exploit on NodeJS?

In a database table, I was running some phone number validations and I noticed that some unicode characters were inserted in a phone number field.
The characters are:

(U+202C): Pop Directional Formatting
(U+202D): Left-to-Right Override

Continue reading Are "Pop Directional Formatting" and "Left-to-Right Override" unicode characters a possible exploit on NodeJS?