Chrome Version       : 65.0.3325.181
Other browsers tested:
  Yes, this issue was with chrome on windows and android too.
I have tested this issue:
       Edge:Has passes the test. The homograph text was decoded on pasting into URL bar.

What steps will reproduce the problem?
(1)Going to this URL " http://www.xn--bgrock-p9a.com/ " is producing a homograph URL resulting which looks like " http://www.bigrock.com/ "

The expected result is when the 'i' in the bigrock.com(As there is an "i" in that domain) should be decoded that is, the non ASCII character should change to ASCII.

What happens instead?
The URL "http://www.xn--bgrock-p9a.com/" looks like "http://bigrock.com/" eccept there is a small difference in "i" where user can be tricked and that may lead to social engineering attack on user.

This decoding of non ASCII works perfectly fine on Edge browser only on Windows version and Android Version of chrome, i had observer this issue. This may lead to serious social engineering tricks like making phishing pages will be more easy. This may lead to many problems for the users further as attackers using social engineering as much as they can because it's said, "WHEN MACHINES ARE NOT VULNERABLE, HUMANS ARE."


 

Deleted: 1.PNG 84.6 KB

	1.PNG 84.6 KB View Download