New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 719773 link

Starred by 2 users
Status: Duplicate
Merged: issue 703750
Owner:
js...@chromium.org
Closed: May 2017
Cc:
█ mgiuca@chromium.org
creis@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 1
Type: Bug-Security
Team-Security-UX



Sign in to add a comment

Security: Whole-script confusable domain label spoofing

Reported by chromium...@gmail.com, May 9 2017 
VERSION
Chrome Version: 60.0.3091.0 canary
Operating System: Windows 7

REPRODUCTION CASE
1. visit https://gmaíl.com

Comment 2 by elawrence@chromium.org, May 9 2017

Cc: js...@chromium.org
Components: UI>Browser>Omnibox UI>Security>UrlFormatting UI>Internationalization
Status: Untriaged (was: Unconfirmed)

Comment 3 by elawrence@chromium.org, May 9 2017 

U+00ED	í	c3 ad	LATIN SMALL LETTER I WITH ACUTE

Comment 4 by aarya@google.com, May 9 2017

Cc: -js...@chromium.org
Labels: Security_Severity-Medium Security_Impact-Stable OS-All Pri-1
Owner: js...@chromium.org
Status: Assigned (was: Untriaged)

Comment 5 by js...@chromium.org, May 9 2017

Mergedinto: 703750
Status: Duplicate (was: Assigned)
Project Member

Comment 6 by sheriffbot@chromium.org, Aug 16 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment