[Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 --- Comment #7 from AtifAli --- Created attachment 181791 [details] well well, indeed Indeed, so it seems (with an ancient word 2003 anyway), so that's interesting. So moves in that direction would be towards compatibility which is neat.

[Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 Matt K changed: What|Removed |Added Status|NEW |NEEDINFO -- You are receiving this

[Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 --- Comment #6 from Matt K --- When I try to click the link for the incorrect "ask.com" in doc given in comment 0, it opens the Microsoft Edge web browser and tries to connect to http://xn--as-3pa.com/, which is the puny code translation.

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 --- Comment #5 from QA Administrators --- Dear Matthew Jones, To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 Michael Warner changed: What|Removed |Added Blocks||107733 See Also|

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 --- Comment #4 from QA Administrators --- Dear Matthew Jones, To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 --- Comment #3 from eisa01 --- Still present Version: 6.4.0.0.alpha1+ Build ID: 80109586e6cb6d3e2e0a53a9079c3125ec9b8368 CPU threads: 4; OS: Mac OS X 10.14.6; UI render: default; VCL: osx; Locale: en-US (en_US.UTF-8); UI-Language: en-US

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 --- Comment #2 from Xisco Faulí --- ** Please read this message in its entirety before responding ** To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 Aron Budea changed: What|Removed |Added Keywords||security

[Libreoffice-bugs] [Bug 97438] URLs are not escaped by Punycode and are susceptible to IDN attacks

https://bugs.documentfoundation.org/show_bug.cgi?id=97438 Beluga changed: What|Removed |Added Priority|medium |high