News for hackers. Stuff that matters.
Re:How can you be fooled by the U+202E trick? (2013) by account42 on Wednesday February 16, 2022 @09:47AM (#30360605)
> and more recently display that instead of the raw url

Technically, punicode is the raw URL and old enough browsers will display all non-ASCII domains as punycode. It was only for a short while that browsers naively decoded punicode without restrictions.

There are no comments on this comment yet.