>>7986Looking good! I used the snippet you suggested with double encode = false, so we shouldn't be exposed to a risk of abuse.
The Arabic issue due to combining strippers was resolved by actually targeting the combiner character classes instead of code blocks, but since that would destroy some legitimate non-English text, I made it only allow 3 or more consecutive combiners. AFAIK the combiners were removed to stop Zalgo text interrupting other posts, or maybe for evading filters, rather than security issues. Does this sound sane?