Disallow RTL override characters in titles

(Mr.Burns avatar therefor TDWTF) #1

The new indicator for topics has problems with things that are allowed in the topic title.

Note: this is from http://what.thedailywtf.com/category/meta/one-post and looks like it is due to unicode support in the topic titles (at least that is where the NEW is showing).

Edit: specifically the LTR and RTL overrides.

(Jeff Atwood) #2

No different than any other kind of odd Unicode content griefing and should be handled the same way.

I’d just block or suspend any user who persisted in doing this for now.

Possible that we could disallow certain unicode characters from titles, but this is playing whack-a-mole.

(Mr.Burns avatar therefor TDWTF) #3

It also plays with the edit pencil on the title when you do it. So yeah it is an issue with allowing unicode characters, but don’t know if others would also break it. I’d suggest using a whitelist rather than a blacklist.

(Rikki Tooley) #4

It also affects how the titles are stored in the database

(Sam Saffron) #5

I am ok with allowing admin to pass it through a regex and adding a site setting.

Building a whitelist of every unicode that is valid and known to man is not easy, also zalgotext may be “valid” in your local its just that its overdoing it.

I don’t think this battle can easily be beaten by computers. Its why you have a flag button.

(Mr.Burns avatar therefor TDWTF) #6

Really there is no problem with allowing the unicode in the title, you just need to separate the title from where the NEW alert bubble and edit pencil go. Surround the title in span or whatever and put them next to that.

(Sam Saffron) #7

Yeah an extra span there is important for styling anyway.