Able to reproduce the issue on Linux 14.04 chrome version 52.0.2743.82 and canary 54.0.2810.2 - A message "https://xn--uawiki-3db67b.pl/ wants to know your location" shows up

This is working fine in firefox browser - Please find the screenshot

This issue can be seen from M30 builds to latest canary
Issue can be seen on mac and win8.1 as well

Deleted: Screen Shot 2016-07-29 at 3.33.05 PM.png 343 KB

	Screen Shot 2016-07-29 at 3.33.05 PM.png 343 KB View Download

Working fine in IE 11 on win7 -- see attachment

Deleted: zulawiki-ie.png 505 KB

	zulawiki-ie.png 505 KB View Download

Reproduced locally. It looks like that dialog's code calls straight through to GURL, so maybe GURL is returning a punycoded host.

Over to brettw@ for these questions:
1) Is GURL::host_piece() expected to return punycode?
2) If so, what should one use to turn the string back into a displayable string?

1) Yes
2) components/url_formatter. Maybe something like AppendFormattedHost() in there.

There is a WIP CL for this, pending review from security enamel: https://codereview.chromium.org/2341213004/

I noticed this behavior and was a bit puzzled as to why we still show punycode because I thought I had fixed FormatUrlForSecurityDisplay in April (when overhauling IDN display policy). It turned out that somehow I overlooked FormatUrlForSecurity. 

elide_url.h still has this comment for FormatUrlForSecurityDisplay. 

// Internationalized domain names (IDN) may be presented in Unicode if
// they're regarded safe. See |url_formatter::FormatUrl| for more details on
// the algorithm).

Somehow, the above comment and the actual implementation differ from each other. 

jshin@: what happened with this? is it fixed now?

Yes, it's fixed for all LTR domains. For RTL domains, it will still show punycode, which is why bug 650760 is still open. I took a very conservative approach. 

That remaining issue can be dealt with in that bug. I'm closing this bug as fixed.