IE7 will be able to digest a mix of languages.
Starting with the second beta, Internet Explorer 7 supports recording domain names in languages other than English (IDN standard). But after some discussion, the developers decided to change the implementation principles of the IDN .
When using multilingual addresses there is a security problem. Attackers can lure users to sites with similar addresses (characters can be exactly the same, but in different encodings to lead to different sites). If the IE browser has found that the characters belong to another language, then it will force the conversion into a “Punicode” and issue a corresponding message ( screenshot ). Previously, in addition to this, another protective measure was applied - a total ban on mixing characters from different encodings in the address bar. For example, if in the address paypal.com one of the Latin "a" is replaced with Cyrillic, then you can direct the user to a completely different site. Previously, it was forbidden, but now you can really do it, but not in all languages.
This protection measure caused protests by users in those countries where mixing characters from different encodings is a normal practice and is often found even in company names. IE developers backed off and promised to allow mixing of encodings for some languages, including Korean, Arabic, Ethiopian, Jewish, Thai, and 23 other languages (there is no Russian in the list). At the same time, the above warning will not be displayed ( screenshot ).
')
The new feature will be implemented in the IE7 Release Candidate (after the third beta).
When using multilingual addresses there is a security problem. Attackers can lure users to sites with similar addresses (characters can be exactly the same, but in different encodings to lead to different sites). If the IE browser has found that the characters belong to another language, then it will force the conversion into a “Punicode” and issue a corresponding message ( screenshot ). Previously, in addition to this, another protective measure was applied - a total ban on mixing characters from different encodings in the address bar. For example, if in the address paypal.com one of the Latin "a" is replaced with Cyrillic, then you can direct the user to a completely different site. Previously, it was forbidden, but now you can really do it, but not in all languages.
This protection measure caused protests by users in those countries where mixing characters from different encodings is a normal practice and is often found even in company names. IE developers backed off and promised to allow mixing of encodings for some languages, including Korean, Arabic, Ethiopian, Jewish, Thai, and 23 other languages (there is no Russian in the list). At the same time, the above warning will not be displayed ( screenshot ).
')
The new feature will be implemented in the IE7 Release Candidate (after the third beta).
Source: https://habr.com/ru/post/1407/
All Articles