Web & Email
I know there is java or SQL injection code where we can get hidden characters.
Example. Before we logging to any website with our username and password we type the username and password in the relevant filed then before click logging or submit we type the java or SQS injection in to web address...