Hacker GitHub

← All repos

minimaxir/big-list-of-naughty-strings

View on GitHub ↗ ★ 47,720 Python

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

62 mentions on Hacker News by 58 people: 12 stories, 50 comments · first 2015-08-10 · latest 2026-02-21

Mentions per year 62 mentions · busiest year 2017 (13)
20082026
AllStoriesComments NewestTopOldest
  1. Mandatory mention: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by egorfine · 2024-11-25 · in Charset="WTF-8"
  2. Try "Human Injection" next: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by denysvitali · 2024-01-21 · in What's that touchscreen in my room?
  3. Related: https://github.com/minimaxir/big-list-of-naughty-strings The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
    comment by rudolfwinestock · 2023-11-12 · in Horrible edge cases to consider when dealing with music (2022)
  4. Sounds like we need to use the Big List Of Naughty Strings to weed out troublesome usernames... https://github.com/minimaxir/big-list-of-naughty-strings
    comment by Cadwhisker · 2023-07-27 · in Super sorry to the guy with the username reset on GitHub
  5. For fuzzing, the Big List of Naughty Strings is a nice starting point: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by colejohnson66 · 2022-10-04 · in What can’t the internet handle in 2022? Apostrophes
  6. …[1] https://github.com/jwilk/url.sh [2] https://en.wikipedia.org/wiki/EICAR_test_file [3] https://github.com/minimaxir/big-list-of-naughty-strings [4] https://en.wikipedia.org/wiki/Fully_qualified_domain_name
    comment by BoppreH · 2022-10-02 · in Recon and Attack Vectors from My Logs
  7. This is usually the point to link to the Big List of Naughty Strings: https://github.com/minimaxir/big-list-of-naughty-strings If your system can handle these it can probably handle most global text.
    comment by robin_reala · 2022-06-18 · in Breaking our Latin-1 assumptions (2017)
  8. …haven’t been super careful. This entry, by the way, is a fantastic little easter egg in the list: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by OskarS · 2021-10-20 · in I couldn't debug the code because of my name
  9. For a list of strings that often cause problems to, e.g., add to a test suite, see https://github.com/minimaxir/big-list-of-naughty-strings
    comment by amarshall · 2021-10-20 · in I couldn't debug the code because of my name
  10. …likely isn’t enough. Most tests are better of with something like the big list of naughty strings ( https://github.com/minimaxir/big-list-of-naughty-strings )
    comment by Someone · 2021-10-20 · in I couldn't debug the code because of my name
  11. …handles cases like this: <sc<script>ript>alert('XSS')</sc</script>ript> ...and other strings from https://github.com/minimaxir/big-list-of-naughty-strings
    comment by ataylor32 · 2021-05-06 · in HTML Sanitizer API
  12. People like that is the reason why this list was created https://github.com/minimaxir/big-list-of-naughty-strings/blo... My personal favorite is this one though "If you're reading this, you've been in a coma for almost 20 years now. We're…
    comment by xyst · 2021-01-14 · in Null
  13. …string should be added to the Big List of Naughty Strings ¹ (discussed here previously²). 1. https://github.com/minimaxir/big-list-of-naughty-strings 2. https://news.ycombinator.com/item?id=13406119
    comment by teddyh · 2020-07-19 · in The cpio trailer problem (2018)
  14. And out of curiosity, taking some from this: https://github.com/minimaxir/big-list-of-naughty-strings/blo... especially the Asian ones, seems to varying from mildly amusing to interesting effects, when you try to set them as SSID.
    comment by unnouinceput · 2020-07-02 · in Comparing how different devices display the SSID “á̶̛̛̓̿̈͐͆̐̇̒̑̈́͘͝aaa”
  15. It's in the Big List of Nauthy Strings for this reason: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by BiteCode_dev · 2020-06-12 · in New Facebook tool allows employers to suppress “unionize” in workplace chat
  16. …at master to minimaxir/big-list-of-naughty-strings at master via a pull request [1]. [1] https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by colinchartier · 2020-05-25 · in The Big List of Naughty Strings
  17. …in the .gitattributes file *.php diff Overall I am amazed that everything shows properly in GitHub. https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by Seb-C · 2020-05-25 · in The Big List of Naughty Strings
  18. …doesn't do git, what does that even mean? Does git allows multiple branches with same names? [1]: https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by gitnewbie · 2020-05-25 · in The Big List of Naughty Strings
  19. commit that added it if anyone is interested https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by voxic11 · 2020-05-24 · in The Big List of Naughty Strings
  20. …:). For those who does not know, it's very important for muslims and It's all over the Quran [1] https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by harunurhan · 2020-05-24 · in The Big List of Naughty Strings
  21. https://github.com/minimaxir/big-list-of-naughty-strings/blo... just lovely ;)
    comment by toolslive · 2020-05-24 · in The Big List of Naughty Strings
  22. Not exactly what you asked for, but https://github.com/minimaxir/big-list-of-naughty-strings/ does have a lot of inputs which, if given as names, would turn out the bugs you're looking for.
    comment by Sirened · 2019-11-10 · in My name causes an issue with any booking
  23. Are you familiar with the big list of naughty strings? https://github.com/minimaxir/big-list-of-naughty-strings/
    comment by andreareina · 2019-09-09 · in String Lengths in Unicode
  24. …under heavy fuzzing and where possible, sanitize different input. It should be tested against this: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by octosphere · 2018-11-27 · in Ask HN: As a programmer, how do you know if you're a good one or not?
  25. …in them (because they're defined in a newline delimited file)? EDIT: Yup, there's an issue for that https://github.com/minimaxir/big-list-of-naughty-strings/iss... It's a little ironic BLNS can't handle certain strings :)
    comment by tlrobinson · 2018-11-16 · in Big List of Naughty Strings
  26. https://github.com/minimaxir/big-list-of-naughty-strings/com... is a fine commit message, don't you agree?
    comment by Arnt · 2018-11-16 · in Big List of Naughty Strings
  27. This string made me chuckle https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by robertkrossa · 2018-11-16 · in Big List of Naughty Strings
  28. https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by reificator · 2018-11-16 · in Big List of Naughty Strings
  29. …QA, both of these cases in part inspired me to create the Big List of Naughty Strings years ago: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by minimaxir · 2018-02-15 · in Picking Apart the Crashing iOS String
  30. The big list of naughty strings is a good place to start when digging up input issues: https://github.com/minimaxir/big-list-of-naughty-strings
    comment by amboar · 2018-02-11 · in The insane amount of backward compatibility in Google Maps
  31. …per-se, but for testing string handling in general I remember this was posted to HN a while back https://github.com/minimaxir/big-list-of-naughty-strings
    comment by kalleboo · 2017-08-19 · in My last name makes me invisible to Computers (2015)
  32. Time to make a playlist full of songs with these names and see if you can crash Bose servers: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by cwkoss · 2017-04-19 · in Bose Headphones Spy on Users, Lawsuit Says
  33. https://github.com/minimaxir/big-list-of-naughty-strings/blo... > Strings which punish the fools who use cat/type on this file
    comment by solidsnack9000 · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  34. Already an issue: https://github.com/minimaxir/big-list-of-naughty-strings/iss...
    comment by Arnavion · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  35. …to get a link tied to the commit. Otherwise it may be out of date the next time the file changes. ( https://github.com/minimaxir/big-list-of-naughty-strings/blo... )
    comment by derimagia · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  36. The list itself can be found here: https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by r-w · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  37. No, wake up!! (For any who want to take the blue pill: https://github.com/minimaxir/big-list-of-naughty-strings/blo... )
    comment by ljoshua · 2017-01-16 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  38. …with alternate versions, to prevent the possibility of cross-site scripting in HTML email" . [1] https://github.com/minimaxir/big-list-of-naughty-strings/com... [2] https://en.wikipedia.org/wiki/Scunthorpe_problem
    comment by manarth · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  39. …that in the master list it's annotated as: # Strings which may cause human to reinterpret worldview https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by jjcm · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  40. …human. This is a message from the Matrix. You've been in a coma for 20 years. Please write back. https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by Confiks · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  41. This is a fair concern. Added a comment to the disclaimer: https://github.com/minimaxir/big-list-of-naughty-strings/com...
    comment by minimaxir · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  42. This is a fun issue https://github.com/minimaxir/big-list-of-naughty-strings/iss...
    comment by thomasahle · 2017-01-15 · in Naughty Strings: A list of strings likely to cause issues as user-input data
  43. https://github.com/minimaxir/big-list-of-naughty-strings
    comment by chishaku · 2016-08-10 · in Show HN: Give 7B people an instant physical address
  44. …presented. (See commit log, there were no commits proximate prior to the Feb 9 date of the threads: https://github.com/minimaxir/big-list-of-naughty-strings/com... ) The February /r/webdev thread in question:…
    comment by minimaxir · 2016-06-18 · in Understanding the Factors That Impact the Popularity of GitHub Repositories
  45. As someone who owns a repository with 11,529 stars ( https://github.com/minimaxir/big-list-of-naughty-strings ), I notice a few problems with the logic presented. I happen to have a scraper handy for tracking stars over time, and profiling…
    comment by minimaxir · 2016-06-18 · in Understanding the Factors That Impact the Popularity of GitHub Repositories
  46. This is pretty clever. I think you should add this to the big list of naugthy strings https://github.com/minimaxir/big-list-of-naughty-strings
    comment by richerlariviere · 2016-04-15 · in Microsoft Edge XSS Filter Bypass
  47. Not to be confused with the big list of naughty strings... https://github.com/minimaxir/big-list-of-naughty-strings
    comment by stevenmays · 2016-04-06 · in List of Dirty, Naughty, Obscene, and Otherwise Bad Words
  48. …"Big List of Naughty Strings" test[1], as far as I can tell: https://www.pastery.net/fnfpmw/ [1] https://github.com/minimaxir/big-list-of-naughty-strings
    comment by flashman · 2015-12-08 · in Show HN: A friend and I made a beautiful pastebin
  49. …escapes could be used for nefarious purposes. [0] https://news.ycombinator.com/item?id=10035008 [1] https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by im3w1l · 2015-08-14 · in Blinking Commits
  50. …a PR [0] that also includes Spamassassin's GTUBE [1] which is designed to do a similar thing. [0] https://github.com/minimaxir/big-list-of-naughty-strings/pul... [1] http://spamassassin.apache.org/gtube/
    comment by lamby · 2015-08-11 · in Show HN: Big List of Naughty Strings for testing user-input data