UTF-8

[Nick Teint]

2010/6/17 Nicolas Williams <Nicolas.Williams at oracle.com>:
> On the one hand, I agree: ACE leakage into UIs is bad, therefore ACE
> avoidance is good.

Sometimes, you _do_ want ACEs to leak into the UI:

1. Your user does not know the script. Displaying an ugly ACE string
is better than displaying some known-to-be-unrecognisable characters.*

2. You don't have the fonts. Displaying an ugly ACE string is better
than displaying "???????".

3. The string contains conspicuous confusables. Displaying an ugly ACE
string is better than displaying a maliciously-crafted string.

NT

PS: * For this purpose, it might even make sense to define
Script-Compatible Encodings (SCEs) for scripts other than Latin/ASCII.