Re: [encoding] "13.2.2 iso-2022-jp encoder" (#15)

> But removing characters may be another XSS vector (e.g. "<[0x0E]script").

U+FFFD can be used when decoding.
When encoding, harmless character such as "？", "・" and "〓" will be better?
May be not only ESC, SI and SO, but also those outside JIS charset should be treated as such when encoding.


---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/encoding/issues/15#issuecomment-164218468