bug#25600: 26.0.50; shr doesn't heed the IDNA non-obfuscation rules

bug#25600: 26.0.50; shr doesn't heed the IDNA non-obfuscation rules

[Lars Ingebrigtsen]

[-- Attachment #1: Type: text/plain, Size: 474 bytes --]


If you view the following HTML, shr will (on mouseover etc) display the
domain as something that looks like "www.microsoft.com", when it's
really an IDNA domain with a cyrillic letter in the middle.

I thought eww/shr had fixed this everywhere, but apparently it's just in
the eww header line.  shr should also apply the same rules (for mixing
latin and non-latin characters) and display the link as
"www.xn--mirsft-yqfbx.com" or something.  Perhaps with a warning, even.


[-- Attachment #2: idna.html --]
[-- Type: text/html, Size: 703 bytes --]

[-- Attachment #3: Type: text/plain, Size: 400 bytes --]





In GNU Emacs 26.0.50.1 (x86_64-unknown-linux-gnu, GTK+ Version 3.14.5)
 of 2017-01-30 built on stories
Repository revision: ab96c8509736a7ed622916ad2749ff356e520d02
Windowing system distributor 'The X.Org Foundation', version 11.0.11604000
System Description:	Debian GNU/Linux 8.6 (jessie)


-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#25600: 26.0.50; shr doesn't heed the IDNA non-obfuscation rules

[Lars Ingebrigtsen]

Lars Ingebrigtsen <larsi@gnus.org> writes:

> It doesn't 'disable' as such, but renders the 'punycode' in full, so a fake
> 'http://www.miсrоsоft.com' is rendered as instead
> 'http://www.xn--mirsft-yqfbx.com'.

I've now implemented this.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no