Hacker News new | ask | show | jobs
by manwe150 36 days ago
> Ill-formed UTF-16 is replaced with U+FFFD by default, or escaped under {:?}.

Silently corrupting the path seems an odd choice in this day and age, when WTF8 has existed for many years and fixes this round trip bug / security vulnerability

1 comments

Yes, but WTF-8 is not UTF-8.
Yeah, but picking utf8 over wtf8 for this in 2026 feels a lot like picking utf16 over utf8 in 1995. You know the choice is broken and you know there is a correct fix already out there.