In this blog post I take a look at how well GitHub, GitLab and Bitbucket support reviewers in finding malicious code changes in pull requests.
  • monk@lemmy.unboiled.info
    0·
    2 years ago

    Homoglyphs? Invisible text? Bidirectional text? Just highlight every line that goes beyond ASCII with yellow warning colors and require to vet it. Maybe make localization data an exception.

    • cbarrick@lemmy.worldEnglish
      0·
      2 years ago

      This doesn’t work for code bases written in non-English languages. Especially east asian languages.

      Any line containing an identifier that is also a word would be highlighted.

      More and more programming languages are supporting unicode identifiers for this use case.

        • sndrtj@feddit.nl
          1·
          2 years ago

          I’d suggest to have the occasional look at the “most popular repos” ranking. It’s about 50% Chinese.

          Super-interesting sometimes as it shows completely different tech trends.