Collected research

Variable Width Encoding

Variable Width Encoding ha.ckers.org web application security lab

Reports Cheng Peng Su's variable-width encoding filter evasion: a lead byte in the range 192-253 or 255 combines with a following double quote into a single multibyte character, so the quote stops terminating an attribute and the attacker stays inside the tag. Affects UTF-8, GB2312, GB18030, BIG5, EUC-KR, EUC-JP and SHIFT_JIS in Internet Explorer.

Record

Document

Variable Width Encoding ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

Other

In the archive

• Collected in the 2006 research round

Tags

• charset
• encoding
• unicode
• filter-bypass
• xss
• sanitizer-bypass
• parser-differential
• prior-art-extension
• owasp-a02-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.