HIGHCWE-116
PARSE-010 Zero-Width Character Injection
Parser Differential: Exploits differences in how parsers (JSON, YAML, markdown) interpret the same input to bypass security controls
Description
Injects zero-width Unicode characters (ZWJ, ZWNJ, ZWSP) to create visually invisible text that bypasses content filters but is processed by the agent
Remediation
Strip zero-width characters from all input before processing. Apply content filters after Unicode normalization and zero-width removal.