125871 - browser adds .com

Status: VERIFIED DUPLICATE of bug 115539

(Core :: Security, defect)

Description

[Matthew Hannigan]

mozilla adds .com to bare words when typed in the
location field.  I can that this could be useful,
but it can have a negative effect.  I just typed
googlecom (note missing dot) into the location, and
mozilla expanded to a googlecom.com which is a PORN
site which frames and includes google.com, plus
puts up lots of those damn popups.

NOTE : DO NOT TRY THIS YOURSELF! THESE GUYS LOVE THE
EXTRA TRAFFIC!

In this case it was a little more than annoying,
especially since I though I was at the real google.

It can of course have a significant security impact,
if the spoofed example was a bank or some other site.

Comment 1

[Michael Lefevre]

i think this note about the security issue is something to think about, but this
is a dupe of bug 115539

Comment 2

[Christian :Biesinger (don't email me, ping me on IRC)]

*** This bug has been marked as a duplicate of 115539 ***

Comment 3

[Jonas Jørgensen]

verified duplicate