1310906 - Homograph attack in home page settings.

Status: NEW

(Firefox :: Settings UI, defect)

Description

[Japz]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0
Build ID: 20160922113459

Steps to reproduce:

Adding a site to the homepage did not validate the url properly, it should be validating the url in setting the home page and display the punycode.

Firefox version 49.0.1

- Go to firefox settings
- Put IDN "http://ebаy.com/" in home page
- Close the browser
- Re-open the browser and you will be redirected to "http://xn--eby-7cd.com/"



Actual results:

Setting the home page to "http://ebаy.com/" will result in redirecting to "http://xn--eby-7cd.com/" , the url should be validated and display the punycode


Expected results:

When adding a home page, firefox browser should validate the inputted IDN in homepage settings and should display the exact punycode.

Comment 1

[Japz]

Hello , any updates on this ?