Bug#1014029: invisible malicious unicode in source code - detection and prevention

[Stephan Verbücheln <erlenmayr@gmail.com>]

Your text is quite chaotic, it is hard to distinguish the quotes from
your ideas what to do in Debian.

I think the main problem here are the programs which are presenting
source code to humans (text editors, terminals, HTML pages in Gitlab
etc.).
Quotes should always terminate everything. A control character within a
string literal should not have any effect outside of the quotes. The
rules should be similar as we know them from syntax highlighting. All
directional instructions should be terminated by the closing quote.

However, since it is not realistic to free all relevant tools from all
related bugs soon, compiler warnings make sense.
There I think it does not make sense to ban all Unicode. Unicode
clearly distinguishes printable and non-printable characters and so on.
So all characters that print something clearly visible can be
whitelisted.

Regards