> The UTF-8 representations of U+D800..U+DFFF, U+FFFE, and U+FFFF are not > allowed in a UTF-8 stream and a secure UTF-8 decoder must never output > any of these characters. Can you explain a bit more about the security issues? --Guido van Rossum (home page: http://www.python.org/~guido/)