Smuggling hidden backdoors into JavaScript with homoglyphs and invisible Unicode characters – The Daily Swig

Researchers urge developers to secure code by disallowing non-ASCII characters.