GNU bug report logs - #25600
26.0.50; shr doesn't heed the IDNA non-obfuscation rules

Previous Next

Package: emacs;

Reported by: Lars Ingebrigtsen <larsi <at> gnus.org>

Date: Wed, 1 Feb 2017 15:05:02 UTC

Severity: normal

Tags: fixed

Found in version 26.0.50

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 25600 in the body.
You can then email your comments to 25600 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#25600; Package emacs. (Wed, 01 Feb 2017 15:05:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to Lars Ingebrigtsen <larsi <at> gnus.org>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Wed, 01 Feb 2017 15:05:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: bug-gnu-emacs <at> gnu.org
Subject: 26.0.50; shr doesn't heed the IDNA non-obfuscation rules
Date: Wed, 01 Feb 2017 16:03:32 +0100

[Message part 1 (text/plain, inline)]
If you view the following HTML, shr will (on mouseover etc) display the
domain as something that looks like "www.microsoft.com", when it's
really an IDNA domain with a cyrillic letter in the middle.

I thought eww/shr had fixed this everywhere, but apparently it's just in
the eww header line.  shr should also apply the same rules (for mixing
latin and non-latin characters) and display the link as
"www.xn--mirsft-yqfbx.com" or something.  Perhaps with a warning, even.


[idna.html (text/html, inline)]
[Message part 3 (text/plain, inline)]



In GNU Emacs 26.0.50.1 (x86_64-unknown-linux-gnu, GTK+ Version 3.14.5)
 of 2017-01-30 built on stories
Repository revision: ab96c8509736a7ed622916ad2749ff356e520d02
Windowing system distributor 'The X.Org Foundation', version 11.0.11604000
System Description:	Debian GNU/Linux 8.6 (jessie)


-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no
Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#25600; Package emacs. (Fri, 13 Apr 2018 15:12:01 GMT) Full text and rfc822 format available.

Message #8 received at 25600 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: 25600 <at> debbugs.gnu.org
Subject: Re: bug#25600: 26.0.50;
 shr doesn't heed the IDNA non-obfuscation rules
Date: Fri, 13 Apr 2018 17:11:34 +0200

Lars Ingebrigtsen <larsi <at> gnus.org> writes:

> It doesn't 'disable' as such, but renders the 'punycode' in full, so a fake
> 'http://www.miсrоsоft.com' is rendered as instead
> 'http://www.xn--mirsft-yqfbx.com'.

I've now implemented this.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no
Added tag(s) fixed. Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Fri, 13 Apr 2018 15:12:02 GMT) Full text and rfc822 format available.
bug closed, send any further explanations to 25600 <at> debbugs.gnu.org and Lars Ingebrigtsen <larsi <at> gnus.org> Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Fri, 13 Apr 2018 15:12:02 GMT) Full text and rfc822 format available.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 12 May 2018 11:24:04 GMT) Full text and rfc822 format available.
This bug report was last modified 7 years and 41 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.