For my README.md, BitBucket reports "This file contains invisible Unicode characters that have been substituted and highlighted. Executing code that contains these invisible characters can have unexpected and malicious results." The only highlighted area is at the end of the file shows '<U00a0>' which is a no-break space, and comes at the end of a footnote just before a link back to the footnote in the text - `<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">↩</a>`.
My guess is that the Markdown parser that BitBucket uses to render footnotes is putting that Unicode equivalent of ` ` before the backlink, and AFTER that happens, BitBucket runs the 'check for potentially malicious invisible Unicode characters' plugin.
This doesn't harm anything, but it is demonstrably a false-positive warning.
I recommend either moving the Unicode check to before the Markdown render, or whitelisting the offending Unicode character U00a0 in the Unicode checker, or change the setting of the Markdown renderer to avoid emitting characters that will trigger the malicious Unicode checker.
![2023-03-14 13_52_17 [1333x137].png](https://us.v-cdn.net/6038660/uploads/images/245477i2E8BE91A09487CFF/2023-03-14%2013_52_17%20%5B1333x137%5D.png "2023-03-14 13_52_17 [1333x137].png")