zostera / django-bootstrap4 / 35513041354

87%

push

github

Fail lint on invisible and bidirectional control characters (#888)

Propagated verbatim from django-marina, which is the canonical source for the
justfile. See zostera/django-marina#680 for the reasoning.

These characters do not render in a diff or a review, which is what makes them
useful for hiding code (Trojan Source, CVE-2021-42574). The check is a git
grep over tracked files, so it covers every file type rather than just Python.

This repo carried two of them in docs/settings.rst, inherited from a 2014
commit, so they are removed in the same change. Without that, lint would fail
here on the first run.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

220 of 284 branches covered (77.46%)

Branch coverage included in aggregate %.

719 of 803 relevant lines covered (89.54%)

12.54 hits per line