Writing Secure Code, Second Edition

The Golden I18N Security Rules

You should follow two security rules when building applications designed for international audiences:

• Use Unicode.

• Don't convert between Unicode and other code pages/character sets.

If you follow these two rules, you'll run into few I18N-related security issues; in fact, you can jump to the next chapter if these two rules hold true for your application! For the rest of you, you need to know a few things.