grssam / UIEnhancer

Source code for UI Enhancer addon
https://addons.mozilla.org/en-US/firefox/addon/ui-enhancer/
50 stars 22 forks source link

Security risk: Do not replace dashes with spaces #137

Closed Gitoffthelawn closed 8 years ago

Gitoffthelawn commented 9 years ago

Really need to not replace dashes with spaces in URLs, or at least have an option to turn that off. Makes phishing attacks way too easy.

Example of a legit site with dashes: http://www.if-not-true-then-false.com/

tumpio commented 8 years ago

hmhm maybe this should be put under the setting "Remove gibberish..." or just removed completely

Gitoffthelawn commented 8 years ago

Probably just removed completely.

grssam commented 8 years ago

Fixed by #143