New issue
Advanced search Search tips

Issue 658600 link

Starred by 1 user
Status: Duplicate
Merged: issue 658139
Owner: ----
Closed: Oct 2016
Cc:
elawrence@chromium.org
emilyschechter@chromium.org
nparker@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: ----



Sign in to add a comment

URL OBSFUCATION in chrome Version 54.0.2840.71(Desktop)

Reported by whitehat...@gmail.com, Oct 23 2016 
http://www.mysite.com:login.html@example.com/

After opening this site it redirects to example.com

this is url obsfucation issue which may lead to phishing

Comment 1 by woxxom@gmail.com, Oct 23 2016 

Technically this URL is for example.com as per specification, however you're right: the user name and password sections should have a different color in omnibox.

Comment 2 by battre@chromium.org, Oct 24 2016

Cc: emilyschechter@chromium.org
Components: UI>Browser>Omnibox UI>Browser>Omnibox>SecurityIndicators Security>UX

Comment 3 by emilyschechter@chromium.org, Oct 24 2016

Cc: elawrence@chromium.org nparker@chromium.org
+ a few more folks who may know whether this is a new regression

Comment 4 by elawrence@chromium.org, Oct 24 2016

Mergedinto: 658751
Status: Duplicate (was: Untriaged)
This is the fourth time this bug has been filed in the last week; not clear why.

We don't show the UserInfo in the omnibox.

Comment 5 by elawrence@chromium.org, Oct 24 2016

Mergedinto: -658751 658139

Comment 6 by lafo...@chromium.org, Dec 9 2016

Components: -Security>UX
Labels: Team-Security-UX
Security>UX component is deprecated in favor of the Team-Security-UX label
►

Sign in to add a comment