Open
Description
Part of #10254.
Description
As shown in Security advisory for rustc (CVE-2021-42574), the isolate Unicode characters (LRI, RLI, FSI, PDI) can be used to take bit of text out of context and show it at the beginning or end of the line. We should disallow them to prevent this.
We have already disallowed unbalanced BiDi embedding/override characters in #10326. This is unfortunately not effective against the trick described here.
See How to use Unicode controls for bidi text for details on how these characters work.