a UTF-8 decoder that accepts them might introduce security problems           |