anti-trojan-source

The anti-trojan-source tool is designed to detect trojan source attacks that exploit Unicode bidirectional (bidi) characters to inject malicious code into applications. It employs a comprehensive detection mechanism utilizing an explicit list of dangerous Unicode characters as well as category-based detection for invisible characters, ensuring robust protection against various types of attacks. This tool also integrates with ESLint through a dedicated plugin, facilitating real-time detection of potential security vulnerabilities in codebases.