<<< Date Index >>>     <<< Thread Index >>>

Re: Apple Safari: idn urlbar spoofing

Michal Zalewski wrote:

> Whether Safari devs are to blame here exclusively, I'm not sure - IDN
> concept is by itself pretty evil, and this can be viewed simply a clever
> take on homograph attacks.

I found out that firefox has a configuration property:
network.IDN.blacklist_chars. It includes the character used in the
demonstration (&#x3164; - HANGULL FILLER) and many more. So, the problem
seems to be known (at least in firefox).

-- 
Robert Swiecki
http://www.swiecki.net