Status bar hides some Unicode characters
I was reading https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/ and hovered over the hxxtp://wuzzi[.]net link.
I noticed that the status bar on firefox shows the same text as the on-page text. It doesn't render the unicode url in full. I tried finding a bug describing this, but couldn't find one.
Sample URL:
Wot little.sock3082
Wubrane rozrisanje
Can you report it on https://bugzilla.mozilla.org ? Thanks.
Tutu wotmołwu w konteksće čitać 👍 0Wšě wotmołwy (3)
Note that those Unicode characters are part of the E0000-E007F code block that contains tagged characters and that are not expected to display, so it is expected that you got some representation.
- https://www.google.com/search?sa=X&num=100&q=unicode%20f3%20a0%2081%2094
- https://en.wikibooks.org/wiki/Unicode/Character_reference/E0000-E0FFF
Special Attention: Code points displayed in this page are for special purposes. They are not displayable characters, and in particular are not allowed to be used in HTML.
Wot cor-el