These invisible characters could be hidden backdoors in your JavaScript code

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/these-invisible-characters-could-be-hidden-backdoors-in-your-js-code/

Could malicious backdoors be hiding in your code, that otherwise appears perfectly clean to the human eye and text editors alike?

A security researcher has shed light on how invisible characters can be snuck into JavaScript code to introduce security risks, like backdoors, into your software.

Security researcher Wolfgang Ettlinger, who is also the Director of Certitude Consulting, surmised "what if a backdoor literally cannot be seen and thus evades detection even from thorough code reviews?" [...]

"The script implements a very simple network health check HTTP endpoint that executes ping -c 1 google.com as well as curl -s http: //example.com and returns whether these commands executed successfully. The optional HTTP parameter timeout limits the command execution time," explains the researcher in his blog post.

Invisible characters could be hiding backdoors in your JavaScript code

Could malicious backdoors be hiding in your code, that otherwise appears perfectly clean to the human eye and text editors alike? A security researcher has shed light on how invisible characters can be snuck into JavaScript code to introduce security risks, like backdoors, into your software.

www.bleepingcomputer.com