@dalias @ChuckMcManis @dangoodin Calling `eval` on an apparently empty string being decoded is definitely suspicious and nefarious, it should never pass any decent code review.
undefined
Joost Molenaar
@j0057@hachyderm.io
Posts
-
Heads up you code maintainers who take submissions from people, delete unicode characters. -
Heads up you code maintainers who take submissions from people, delete unicode characters.@dalias @ChuckMcManis @dangoodin Judging by the decoder snippet, the string between the backticks contains U+FE00 VARIATION SELECTOR 1 to U+FE0F VARIATION SELECTOR 16, and U+E0100 to U+E01EF have more variation selectors for 17 to 256. So we can theoretically choose between 256 variants of an emoji!
https://en.wikipedia.org/wiki/Variation_Selectors_%28Unicode_block%29