[BUG]Browser does respect network.IDN_show_punycode value
asked 2019-11-23 12:07:07 +0200
Browser address bar will render puny code regardless of the about:config setting.
Default setting is false which will render puny code. So https://www.äänestyspaikat.fi (something is wrong with the certificate with the site but I could not come up with better example) will show as https://www.äänestyspaikat.fi on Jolla browser and desktop Firefox. I clicked the link to the site via https://krooninenaly.wordpress.com/2013/11/09/kkset-www-osoitteissa/
Change it to true which will SHOW puny code. So https://www.äänestyspaikat.fi will show as https://www.xn--nestyspaikat-fcba.fi on desktop Firefox but still show https://www.äänestyspaikat.fi on the Jolla browser address bar. In fact since there is a problem with the site's ceritificate you can see that puny code site name displayed in the warning, but NOT on the address bar.
I think this is security issue if you want to SHOW punycode (and expect it to work) because punycode can be used to make malicious websites names look like legitimate websites.
Torronsuo, Xperia 10
