1404815 - Don't chop off the first part of a three-part website address in the page title

Status: RESOLVED DUPLICATE of bug 1284046

(Firefox for Android Graveyard :: General, defect)

Description

[Dan Jacobson]

User Agent: Mozilla/5.0 (Android 7.0; Mobile; rv:58.0) Gecko/58.0 Firefox/58.0
Build ID: 20171001100334

Steps to reproduce:

I have two websites m dot jidanni.Org and jidanni.Org.
But when I browse the former, the title at the top of the page that Firefox for Android provides, makes it look like I'm browsing the latter.

Comment 1

[Dan Jacobson]

We even see at the top of the screen
      jidanni.org/?C=M;O=D
With the m. Totally chopped off.
All that detail at the end of the URL and the following blank area makes us think that we are looking at the entire URL. However the first part of the URL, the m. Has been chopped off!

Comment 2

[Dan Jacobson]

Sure, in some worlds the m is a mobile site for the regular site and you might as well chop off the m, but I would only do that for a known list of sites where that holds true always.

Comment 3

[Jan Henning [:JanH]]

This is controlled by "browser.urlbar.trimURLs" and done in https://dxr.mozilla.org/mozilla-central/rev/41286177c59c74ec37961b1edea34cc90d6f6dc5/mobile/android/app/src/photon/java/org/mozilla/gecko/toolbar/ToolbarDisplayLayout.java#339 using https://dxr.mozilla.org/mozilla-central/rev/41286177c59c74ec37961b1edea34cc90d6f6dc5/mobile/android/geckoview/src/main/java/org/mozilla/gecko/util/StringUtils.java#130.

Comment 4

[Dan Jacobson]

Have it coupled with an extra field in the list:
https://blog.mozilla.org/security/2012/11/01/preloading-hsts/

That way other innocent sites wouldn't be affected.

Comment 5

[Bogdan Surd, QA [:bsurd, NI]]

Taking Comment 3 into consideration, closing this issue as invalid since this setting is covered in about:config and can be toggled on and off for any user.

Thank you for your report and if you have any other issues please feel free to fire up a new bug. 

Note:
Tapping on the URL bar also displays the entire length of the URL.

Comment 6

[Dan Jacobson]

OK but I should note here maybe also there security implications involved.

It is assumed that all parts of a domain are all owned by the same
owner, so who would conspire against themselves?

However with many A.B.C sites, A might be under control of individual
users. So it would be a bad idea to allow A.B.C to set up a fake B.C
site, and get away with it due to default preferences.