Avatar for Username

Søg i Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Læs mere

Status bar hides some Unicode characters

  • 3 svar
  • 0 har dette problem
  • Seneste svar af cor-el

little.sock3082
little.sock3082
more options

I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link.

I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one.

Sample URL:

https://wuzzi.net

I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link. I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one. Sample URL: [https://wuzzi.net/%F3%A0%81%94%F3%A0%81%B2%F3%A0%81%B5%F3%A0%81%B3%F3%A0%81%B4%F3%A0%81%8E%F3%A0%81%AF%F3%A0%81%81%F3%A0%81%89 https://wuzzi.net]
Vedhæftede skærmbilleder

Ændret af little.sock3082 den

Valgt løsning

Can you report it on https://bugzilla.mozilla.org ? Thanks.

Læs dette svar i sammenhæng 👍 0

Alle svar (3)

TyDraniu
TyDraniu
  • Top 10 Contributor
more options

Valgt løsning

Can you report it on https://bugzilla.mozilla.org ? Thanks.

Nyttig?

TyDraniu
TyDraniu
  • Top 10 Contributor
more options

OK, this is bug 1915595 for reference.

Nyttig?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Note that those Unicode characters are part of the E0000-E007F code block that contains tagged characters and that are not expected to display, so it is expected that you got some representation.

Special Attention: Code points displayed in this page are for special purposes. They are not displayable characters, and in particular are not allowed to be used in HTML.

Ændret af cor-el den

Nyttig?

Stil et spørgsmål

Du skal logge ind på din konto for at svare på et indlæg. Start et nyt spørgsmål, hvis du ikke har en konto endnu.