[Python-Dev] Security implications of pep 383

[Antoine Pitrou]

On Tue, 29 Mar 2011 22:40:01 +0200
Lennart Regebro <regebro at gmail.com> wrote:
> The lesson here seems to be "if you have to use blacklists, and you
> use unicode strings for those blacklists, also make sure the string
> you compare with doesn't have surrogates".

Not really. As everyone said, this can happen even without surrogates.

Regards

Antoine.