https://lazarpostenje.github.io/posts/unicode-normalization-vulnerabilities/