Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Status bar hides some Unicode characters

little.sock3082
little.sock3082
more options

I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link.

I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one.

Sample URL:

https://wuzzi.net

I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link. I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one. Sample URL: [https://wuzzi.net/%F3%A0%81%94%F3%A0%81%B2%F3%A0%81%B5%F3%A0%81%B3%F3%A0%81%B4%F3%A0%81%8E%F3%A0%81%AF%F3%A0%81%81%F3%A0%81%89 https://wuzzi.net]
Nseta ihuenyo ndị agbakwunyere

Edeziri site na little.sock3082

Asịsa ahọpụtara

Can you report it on https://bugzilla.mozilla.org ? Thanks.

Gụọ azịza a na nghọta 👍 0

All Replies (3)

TyDraniu
TyDraniu
  • Top 10 Contributor
more options

Asịsa Ahọpụtara

Can you report it on https://bugzilla.mozilla.org ? Thanks.

Helpful?

TyDraniu
TyDraniu
  • Top 10 Contributor
more options

OK, this is bug 1915595 for reference.

Helpful?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Note that those Unicode characters are part of the E0000-E007F code block that contains tagged characters and that are not expected to display, so it is expected that you got some representation.

Special Attention: Code points displayed in this page are for special purposes. They are not displayable characters, and in particular are not allowed to be used in HTML.

Edeziri site na cor-el

Helpful?

Jụọ ajụjụ

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.