API DocsFunctions
scanInvisibleChars()
scanInvisibleChars(text, options?): ThreatReportWithoutLocation[]
Defined in: invisible.ts:112
Invisible character detector.
This detector emits span-level threats with the following precedence:
PSU004 → Unicode tag payload PSU005 → Excessive invisible padding PSU001 → Invisible characters present
Additionally:
PSU002 is emitted independently for token boundary manipulation where an invisible character appears inside a visible token.
Span semantics:
• offendingText represents the entire invisible sequence • spans are not merged across newline boundaries
Parameters
text
string
options?
ScanOptions = {}