Hacker GitHub

← All repos

minimaxir/big-list-of-naughty-strings

View on GitHub ↗ ★ 47,720 Python

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

62 mentions on Hacker News by 58 people: 12 stories, 50 comments · first 2015-08-10 · latest 2026-02-21

Mentions per year 62 mentions · busiest year 2017 (13)
20082026
AllStoriesComments NewestTopOldest
  1. ▲ 24
    The Big List of Naughty Strings
    story by shirian · 2026-02-21 · 4 comments
  2. ▲ 3
    Big List of Naughty Strings (2021)
    story by l1am0 · 2026-02-12 · 1 comment
  3. Mandatory mention: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by egorfine · 2024-11-25 · in Charset="WTF-8"
  4. Try "Human Injection" next: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by denysvitali · 2024-01-21 · in What's that touchscreen in my room?
  5. Related: https://github.com/minimaxir/big-list-of-naughty-strings The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
    comment by rudolfwinestock · 2023-11-12 · in Horrible edge cases to consider when dealing with music (2022)
  6. ▲ 22
    The Big List of Naughty Strings
    story by sys42590 · 2023-09-07 · 2 comments
  7. Sounds like we need to use the Big List Of Naughty Strings to weed out troublesome usernames... https://github.com/minimaxir/big-list-of-naughty-strings
    comment by Cadwhisker · 2023-07-27 · in Super sorry to the guy with the username reset on GitHub
  8. ▲ 4
    The Big List of Naughty Strings
    story by spiffytech · 2023-06-13 · 0 comments
  9. For fuzzing, the Big List of Naughty Strings is a nice starting point: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by colejohnson66 · 2022-10-04 · in What can’t the internet handle in 2022? Apostrophes
  10. …[1] https://github.com/jwilk/url.sh [2] https://en.wikipedia.org/wiki/EICAR_test_file [3] https://github.com/minimaxir/big-list-of-naughty-strings [4] https://en.wikipedia.org/wiki/Fully_qualified_domain_name
    comment by BoppreH · 2022-10-02 · in Recon and Attack Vectors from My Logs
  11. This is usually the point to link to the Big List of Naughty Strings: https://github.com/minimaxir/big-list-of-naughty-strings If your system can handle these it can probably handle most global text.
    comment by robin_reala · 2022-06-18 · in Breaking our Latin-1 assumptions (2017)
  12. ▲ 3
    The Big List of Naughty Strings
    story by graderjs · 2022-03-05 · 0 comments
  13. …haven’t been super careful. This entry, by the way, is a fantastic little easter egg in the list: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by OskarS · 2021-10-20 · in I couldn't debug the code because of my name
  14. For a list of strings that often cause problems to, e.g., add to a test suite, see https://github.com/minimaxir/big-list-of-naughty-strings
    comment by amarshall · 2021-10-20 · in I couldn't debug the code because of my name
  15. …likely isn’t enough. Most tests are better of with something like the big list of naughty strings ( https://github.com/minimaxir/big-list-of-naughty-strings )
    comment by Someone · 2021-10-20 · in I couldn't debug the code because of my name
  16. …handles cases like this: <sc<script>ript>alert('XSS')</sc</script>ript> ...and other strings from https://github.com/minimaxir/big-list-of-naughty-strings
    comment by ataylor32 · 2021-05-06 · in HTML Sanitizer API
  17. People like that is the reason why this list was created https://github.com/minimaxir/big-list-of-naughty-strings/blo... My personal favorite is this one though "If you're reading this, you've been in a coma for almost 20 years now. We're…
    comment by xyst · 2021-01-14 · in Null
  18. …string should be added to the Big List of Naughty Strings ¹ (discussed here previously²). 1. https://github.com/minimaxir/big-list-of-naughty-strings 2. https://news.ycombinator.com/item?id=13406119
    comment by teddyh · 2020-07-19 · in The cpio trailer problem (2018)
  19. And out of curiosity, taking some from this: https://github.com/minimaxir/big-list-of-naughty-strings/blo... especially the Asian ones, seems to varying from mildly amusing to interesting effects, when you try to set them as SSID.
    comment by unnouinceput · 2020-07-02 · in Comparing how different devices display the SSID “á̶̛̛̓̿̈͐͆̐̇̒̑̈́͘͝aaa”
  20. It's in the Big List of Nauthy Strings for this reason: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by BiteCode_dev · 2020-06-12 · in New Facebook tool allows employers to suppress “unionize” in workplace chat
  21. …at master to minimaxir/big-list-of-naughty-strings at master via a pull request [1]. [1] https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by colinchartier · 2020-05-25 · in The Big List of Naughty Strings
  22. …in the .gitattributes file *.php diff Overall I am amazed that everything shows properly in GitHub. https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by Seb-C · 2020-05-25 · in The Big List of Naughty Strings
  23. …doesn't do git, what does that even mean? Does git allows multiple branches with same names? [1]: https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by gitnewbie · 2020-05-25 · in The Big List of Naughty Strings
  24. commit that added it if anyone is interested https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by voxic11 · 2020-05-24 · in The Big List of Naughty Strings
  25. …:). For those who does not know, it's very important for muslims and It's all over the Quran [1] https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by harunurhan · 2020-05-24 · in The Big List of Naughty Strings
  26. https://github.com/minimaxir/big-list-of-naughty-strings/blo... just lovely ;)
    comment by toolslive · 2020-05-24 · in The Big List of Naughty Strings
  27. ▲ 409
    The Big List of Naughty Strings
    story by polm23 · 2020-05-24 · 92 comments
  28. Not exactly what you asked for, but https://github.com/minimaxir/big-list-of-naughty-strings/ does have a lot of inputs which, if given as names, would turn out the bugs you're looking for.
    comment by Sirened · 2019-11-10 · in My name causes an issue with any booking
  29. Are you familiar with the big list of naughty strings? https://github.com/minimaxir/big-list-of-naughty-strings/
    comment by andreareina · 2019-09-09 · in String Lengths in Unicode
  30. …under heavy fuzzing and where possible, sanitize different input. It should be tested against this: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by octosphere · 2018-11-27 · in Ask HN: As a programmer, how do you know if you're a good one or not?
  31. …in them (because they're defined in a newline delimited file)? EDIT: Yup, there's an issue for that https://github.com/minimaxir/big-list-of-naughty-strings/iss... It's a little ironic BLNS can't handle certain strings :)
    comment by tlrobinson · 2018-11-16 · in Big List of Naughty Strings
  32. https://github.com/minimaxir/big-list-of-naughty-strings/com... is a fine commit message, don't you agree?
    comment by Arnt · 2018-11-16 · in Big List of Naughty Strings
  33. This string made me chuckle https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by robertkrossa · 2018-11-16 · in Big List of Naughty Strings
  34. https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by reificator · 2018-11-16 · in Big List of Naughty Strings
  35. ▲ 780
    Big List of Naughty Strings
    story by pmoriarty · 2018-11-16 · 146 comments
  36. ▲ 6
    The Big List of Naughty Strings
    story by LinuxBender · 2018-11-09 · 0 comments
  37. ▲ 4
    Big List of Naughty Strings
    story by golanggeek · 2018-10-08 · 0 comments
  38. ▲ 5
    Big List of Naughty Strings
    story by tosh · 2018-08-23 · 0 comments
  39. …QA, both of these cases in part inspired me to create the Big List of Naughty Strings years ago: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by minimaxir · 2018-02-15 · in Picking Apart the Crashing iOS String
  40. The big list of naughty strings is a good place to start when digging up input issues: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by amboar · 2018-02-11 · in The insane amount of backward compatibility in Google Maps
  41. …per-se, but for testing string handling in general I remember this was posted to HN a while back https://github.com/minimaxir/big-list-of-naughty-strings
    comment by kalleboo · 2017-08-19 · in My last name makes me invisible to Computers (2015)
  42. Time to make a playlist full of songs with these names and see if you can crash Bose servers: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by cwkoss · 2017-04-19 · in Bose Headphones Spy on Users, Lawsuit Says
  43. https://github.com/minimaxir/big-list-of-naughty-strings/blo... > Strings which punish the fools who use cat/type on this file
    comment by solidsnack9000 · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  44. Already an issue: https://github.com/minimaxir/big-list-of-naughty-strings/iss...
    comment by Arnavion · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  45. …to get a link tied to the commit. Otherwise it may be out of date the next time the file changes. ( https://github.com/minimaxir/big-list-of-naughty-strings/blo... )
    comment by derimagia · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  46. The list itself can be found here: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by r-w · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  47. No, wake up!! (For any who want to take the blue pill: https://github.com/minimaxir/big-list-of-naughty-strings/blo... )
    comment by ljoshua · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  48. …with alternate versions, to prevent the possibility of cross-site scripting in HTML email" . [1] https://github.com/minimaxir/big-list-of-naughty-strings/com... [2] https://en.wikipedia.org/wiki/Scunthorpe_problem
    comment by manarth · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  49. …that in the master list it's annotated as: # Strings which may cause human to reinterpret worldview https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by jjcm · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  50. …human. This is a message from the Matrix. You've been in a coma for 20 years. Please write back. https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by Confiks · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data