Issue 789002 link

Starred by 1 user

Issue metadata

Status:	Assigned
Owner:	█ ichikawa@chromium.org Last visit > 30 days ago
Cc:	eugene...@chromium.org ios-bugs@chromium.org █ ichikawa@chromium.org
Components:	Mobile>iOSWebView
EstimatedDays:	----
NextAction:	----
OS:	iOS
Pri:	2
Type:	Feature

Add CWVWebView.visibleURLString

Project Member Reported by ichikawa@chromium.org, Nov 28 2017

Issue description

Basically NSString version of CWVWebView.visibleURL, but uses FormatURLForSecurityDisplay:
https://cs.chromium.org/chromium/src/components/url_formatter/elide_url.h?q=FormatURLForS&sq=package:chromium&l=108
to return a "safe" URL to prevent spoofing such as:
https://en.wikipedia.org/wiki/IDN_homograph_attack

See also:
https://www.chromium.org/developers/design-documents/idn-in-google-chrome

Comment 1 by ichikawa@chromium.org, Sep 11

Cc: eugene...@chromium.org
Labels: -Pri-3 Pri-2
Owner: ichikawa@chromium.org
Status: Assigned (was: Available)

Benefit we gain by using the property compared to visibleURL:

- Can render international URL instead of Punycode, but in a safe way (as mentioned above)
- (Probably) enables shortened domain name e.g., www.google.com -> google.com in the same way as Chrome does

►

Issue 789002 link

Issue metadata

Add CWVWebView.visibleURLString

Issue description

Comment 1 by ichikawa@chromium.org, Sep 11

Comment 1 Deleted

Sign in to add a comment