Home / Vulnerability Database / Config files : Undocumented feature: changing the visual display of the code
Config files

Config files : Undocumented feature: changing the visual display of the code

Classification

Overview

The application uses special characters that change the display order of bidirectional text. With these control characters some parts of the text can be displayed from left to right and others from right to left. Normally such control characters can be used, for example, to insert lines in Hebrew or Arabic into a file with code. However, if one uses these characters to combine lines with different text direction in one line, the right-to-left text snippets can override the regular left-to-right text.

This method allows to add to the code a malicious construction, which can be invisible during review.

MEDIUM

DerScanner Severity Score

Do you want to fix Config files : Undocumented feature: changing the visual display of the code in your application?

See also

Config files

Config files : Text4Shell Vulnerability

Config files

Config files : Incorrect directory deletion

Config files

Config files : Code injection