No matter what, it cannot protect you against assholes who post code with the invisible separator... "⁣" or U+2063 is almost undetectable and can be a pain when you can't see it because it's a 0 width character