Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

Status bar hides some Unicode characters

  • 3 fhreagra
  • 1 leis an bhfadhb seo
  • 19 views
  • Freagra is déanaí ó cor-el

little.sock3082
little.sock3082
more options

I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link.

I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one.

Sample URL:

https://wuzzi.net

I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link. I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one. Sample URL: [https://wuzzi.net/%F3%A0%81%94%F3%A0%81%B2%F3%A0%81%B5%F3%A0%81%B3%F3%A0%81%B4%F3%A0%81%8E%F3%A0%81%AF%F3%A0%81%81%F3%A0%81%89 https://wuzzi.net]
Attached screenshots

Athraithe ag little.sock3082 ar

Réiteach roghnaithe

Can you report it on https://bugzilla.mozilla.org ? Thanks.

Read this answer in context 👍 0

All Replies (3)

TyDraniu
TyDraniu
  • Top 25 Contributor
more options

Réiteach Roghnaithe

Can you report it on https://bugzilla.mozilla.org ? Thanks.

TyDraniu
TyDraniu
  • Top 25 Contributor
more options

OK, this is bug 1915595 for reference.

cor-el
cor-el
  • Top 25 Contributor
  • Moderator
more options

Note that those Unicode characters are part of the E0000-E007F code block that contains tagged characters and that are not expected to display, so it is expected that you got some representation.

Special Attention: Code points displayed in this page are for special purposes. They are not displayable characters, and in particular are not allowed to be used in HTML.

Athraithe ag cor-el ar