New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 781044 link

Starred by 1 user
Status: WontFix
Owner:
js...@chromium.org
Closed: Nov 2017
Cc:
█ markda...@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug-Security



Sign in to add a comment

Security: Whole-script confusable domain label spoofing (Greek)

Reported by chromium...@gmail.com, Nov 2 2017 
VERSION
Chrome Version: 64.0.3256.0 (Official Build) canary (64-bit)
Operating System: Windows 7 

REPRODUCTION CASE

https://γουτυβε.com
http://www.εβαγ.com/

Comment 1 by chromium...@gmail.com, Nov 3 2017

Screen Shot 2017-11-03 at 00.21.14.png
111 KB View Download

Comment 2 by elawrence@chromium.org, Nov 8 2017

Cc: js...@chromium.org
Components: UI>Browser>Omnibox UI>Internationalization

Comment 3 by est...@chromium.org, Nov 8 2017

Cc: -js...@chromium.org
Labels: M-64 Security_Severity-Low Security_Impact-Stable OS-Linux OS-Mac OS-Windows Pri-2
Owner: js...@chromium.org
Status: Assigned (was: Unconfirmed)
jshin, could you take a look please?

Comment 4 by js...@chromium.org, Nov 9 2017

Cc: markda...@google.com
Status: WontFix (was: Assigned)
I'd not regard this as a spoofing risk.
Project Member

Comment 5 by sheriffbot@chromium.org, Feb 15 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment