{"success":true,"data":{"id":"subject-contains-bidi-override","label":"Bidi override in subject line — visual preview spoofing","description":"The subject line contains a Unicode bidi-control character. Attack: Gmail/Outlook/Apple Mail render subjects with native directionality rules, so a subject like `Urgent: \\u202Eegassem esaelP` displays as `Urgent: Please message` reversed in the inbox list preview — the user sees reassuring English and opens a message whose raw subject says something different. Companion to the From-header and attachment-filename bidi signals. Legitimate subjects in any language never contain format-control codepoints.","tier":"danger","category":"subject","isThin":false}}