HackerOne · Report #58612
Homograph attack
Validstatus
5upvotes
2 May 2015disclosed
How it was found
Hello!
I would like to report that fix of report #29491 is incomplete. There is another way to reproduce homograph attack: http:ebаy.com or http:/ebаy.com
IDNs are displayed in unicode and there is no encoding into Punycode on external link warning page
Thanks!
- Matvejs