[New-bugs-announce] [issue45810] Prohibit invisible control characters in string literals and comments

[Steven D'Aprano]

New submission from Steven D'Aprano <steve+python at pearwood.info>:

Currently invisible control characters aside from whitespace (tabs, newlines, formfeeds, carriage returns) are prohibited outside of comments and string literals. As discussed in this thread:

https://mail.python.org/archives/list/python-dev@python.org/message/DN24FK3A2DSO4HBGEDGJXERSAUYK6VK6/

we should ban C0 and C1 control characters (aside from \t\n\f\r) in string literals and comments too.

To be clear, the ban is on actual invisible control characters, not escape sequences.

----------
components: Interpreter Core
messages: 406370
nosy: serhiy.storchaka, steven.daprano
priority: normal
severity: normal
status: open
title: Prohibit invisible control characters in string literals and comments
type: security
versions: Python 3.11

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue45810>
_______________________________________