DrDavidL 7fdfea854b security: add unicode safety guard to hooks and CI (#1710) ...

* security: add unicode safety guard to hooks and CI

* fix(unicode-safety): drop FE0F, PUA; fix col tracking; scan .husky/

- Remove FE0F (emoji presentation selector) from suspicious set — it
  false-positives on ASCII keycap sequences (#️⃣ etc.) in source strings
- Remove Private Use Area (E000–F8FF) check — not a parser attack vector
  and legitimately used by icon font string literals
- Fix column tracking for astral-plane characters (cp > 0xFFFF): increment
  by 2 to match UTF-16 editor column positions
- Remove now-unused prevCp variable
- Add .husky/ to SCAN_ROOTS and '' to INCLUDED_EXTENSIONS so extensionless
  hook scripts (pre-commit, pre-push) are included in full-repo scans

---------

Co-authored-by: Elie Habib <elie.habib@gmail.com>

2026-03-19 08:48:08 +04:00

..

pre-commit

security: add unicode safety guard to hooks and CI (#1710)

2026-03-19 08:48:08 +04:00

pre-push

security: add unicode safety guard to hooks and CI (#1710)

2026-03-19 08:48:08 +04:00