UNICODE XSS VIA COMBINING CHARACTERS

Summary from the TLDR InfoSec newsletter

This gist demonstrates a variant of unicode XSS using character combinations. It also demonstrates how such an attack works and provides the root cause, as well as suggesting approaches for detecting unicode normalization, and flagging such occurrences to be manually inspected.