Google Project Zero reverse-engineers Windows path hacks for better security

Undocumented API features and security

If you're tearing your hair out trying to make sure your Windows 8 / 8.1 /10 application isn't attackable through the filename structure, a Google security engineer has penned a long look at the API to try and help."