commit c8a86652fcaa2bb5d3d0550b99e078844fbf26fe Author: Yawning Angel yawning@schwanenlied.me Date: Wed Jul 19 19:53:55 2017 +0000

Bug 22984: Force IDNs to be displayed as punycode to thwart homograph attacks.

Since no action is being taken by either upstream, unilaterally fix this. --- ChangeLog | 2 ++ data/installer/mozilla.cfg | 3 +++ 2 files changed, 5 insertions(+)

diff --git a/ChangeLog b/ChangeLog index 9a21399..f44a091 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,7 @@ Changes in version 0.0.12 - UNRELEASED: * Bug 22969: Disable the addon blocklist. + * Bug 22984: Force IDNs to be displayed as punycode to thwart homograph + attacks.

Changes in version 0.0.11 - 2017-07-18: * Bug 22910: Deprecate the volatile extension dir option. diff --git a/data/installer/mozilla.cfg b/data/installer/mozilla.cfg index 0ce67a1..dc03adb 100644 --- a/data/installer/mozilla.cfg +++ b/data/installer/mozilla.cfg @@ -34,3 +34,6 @@ lockPref("extensions.getAddons.showPane", false); // Disable the addon blocklist, because it leaks information about the browser // install date among other things to Mozilla. lockPref("extensions.blocklist.enabled", false); + +// Force IDNs to be displayed as punycode to thwart homograph attacks. +defaultPref("network.IDN_show_punycode", true);