153526 - obstruction of url using hex

Status: RESOLVED WONTFIX

(SeaMonkey :: General, enhancement)

Description

[Dustin Isom]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.1a+) Gecko/20020620
BuildID:    2002062008

By converting each octet in the ip address to hex then aligning them side by
side then converting back to decimal results in an obsctucted url.

Reproducible: Always
Steps to Reproduce:
Taken from: http://www.geocities.com/Athens/6939/net/decip.html

"If you take each of the four octets in the IP Number 209.1.224.17 and convert
them to Hexadecimal, you'll get the following byte-sized numbers:

      209 = D1     1 = 01     224 = E0     17 = 11

Placing each of these byte-sized  Hex numbers next to each other in the same
order their decimal equivalents were found in the IP Number will form one large
four-byte Hexadecimal number:
D101E011

This is part of the normal process that any Internet communications program must
go through to arrive at the 32-bit string of binary digits which is actually
used to represent this address inside a computer.

However, if we convert this number into decimal instead, we get:

3506561041"

Then just add http:// in front of it and the url of the site is obstructed from
normal view.

Expected Results:  Display a dialog saying it cannot find host.

Comment 1

[Matthias Versen [:Matti]]

-> Http

Comment 2

[Boris Zbarsky [:bzbarsky]]

The reason browsers support this is because the standard library function
inet_addr() (converts a string to an internet address) supports it.  Browsers
_could_ reinvent the wheel by not using this function and doing their own
parsing, but that seems a little excessive....