A security researcher has shed light on how invisible characters can be snuck into JavaScript code to introduce security ... this expression will always be 'true' as the environment will actually ...