On 8/25/25 20:17, Collin Funk wrote:
Pádraig Brady <[email protected]> writes:
I'm inclined to leave normalization to external tools like iconv and uconv.

That certainly makes life easier. Also, I imagine that normalizing all
input cannot mean good things for performance.

Normalizing all input also has well-known security issues:

https://yarchive.net/comp/linux/utf8.html

When what you asked it to do and what it did don't match, there's usually a potential exploit. Adding automatic "help" tends to subtly break existing stuff that didn't expect it. (SO much plumbing broke back when "sort" suddenly became case insensitive without adding a flag...)

Rob

Reply via email to