[tor-commits] [sandboxed-tor-browser/master] Bug 22984: Force IDNs to be displayed as punycode to thwart homograph attacks.

[yawning at torproject.org]

commit c8a86652fcaa2bb5d3d0550b99e078844fbf26fe
Author: Yawning Angel <yawning at schwanenlied.me>
Date:   Wed Jul 19 19:53:55 2017 +0000

    Bug 22984: Force IDNs to be displayed as punycode to thwart homograph attacks.
    
    Since no action is being taken by either upstream, unilaterally fix
    this.
---
 ChangeLog                  | 2 ++
 data/installer/mozilla.cfg | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 9a21399..f44a091 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,7 @@
 Changes in version 0.0.12 - UNRELEASED:
  * Bug 22969: Disable the addon blocklist.
+ * Bug 22984: Force IDNs to be displayed as punycode to thwart homograph
+   attacks.
 
 Changes in version 0.0.11 - 2017-07-18:
  * Bug 22910: Deprecate the volatile extension dir option.
diff --git a/data/installer/mozilla.cfg b/data/installer/mozilla.cfg
index 0ce67a1..dc03adb 100644
--- a/data/installer/mozilla.cfg
+++ b/data/installer/mozilla.cfg
@@ -34,3 +34,6 @@ lockPref("extensions.getAddons.showPane", false);
 // Disable the addon blocklist, because it leaks information about the browser
 // install date among other things to Mozilla.
 lockPref("extensions.blocklist.enabled", false);
+
+// Force IDNs to be displayed as punycode to thwart homograph attacks.
+defaultPref("network.IDN_show_punycode", true);