I'm scanning HTML before it reaches a browser, and I've just heard about a type of exploit that uses invalid UTF7 or UTF8 sequences to embed an otherwise invisible script tag, which is used to execute arbitrary code.
I have never seen such a sequence myself and I am curious what it looks like, so that I can do a simple strstr call to locate them.
Thanks for any help.