Invisible Unicode in a Rules File Made Copilot and Cursor Write a Backdoor. Find It
Zero-width, bidi and Unicode tag characters hid instructions in AI rules files. How they work, plus a ripgrep check and a git hook that block them.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.