[Python-Dev] String substitution: compile-time versus runtime
Michael McLay
mclay@nist.gov
Fri, 12 Jul 2002 14:34:26 -0400
On Friday 12 July 2002 12:23 pm, Guido van Rossum wrote:
> (and perhaps about being able to use words in their own language as
> identifiers).
Beware of possible lookalike characters. I recently learned that it is
possible to register for domain name with Unicode characters and since there
are indistinguishable character symbols on different code pages (for
instance, the Cyrillic 'o' is indistinguishable from the English 'o') this
has created an interesting opportunity for domain name exploits. It probably
isn't dangerous in the Python source code, but limiting the character set of
identifiers to a small number of characters seems prudent.