← Back to context

Comment by duskdozer

9 hours ago

    uBlock Origin has prevented the following page from loading:

    https://xn--gckvb8fzb.com/hold-on-to-your-hardware/

    This happened because of the following filter:

    ||xn--$document
    The filter has been found in:   IDN Homograph Attack Protection - Complete Blockage

What a silly filter, blocking all xn domains

  • That whole feature is kind of paragraph 22. No legit/popular site uses it so users don't expect national characters in domain names, so no one actually hosts sites using "xn-" domains.

  • Shrug. First time I'd seen this. If it displayed as the original text it would have been clearer.

    • It would make it hard to spot impostor domains like "news.усомbiнаtor[.]сом" if it was. There's enough inertia for FQDNs to be strictly ASCII and any UTF-8(outside ASCII) in domain names to be felt unnatural for an URL, so most systems default to the raw "Punycode" xn-- scheme for all IDNs.

    • In this case yes but it's meant as a punycode scam prevention where common Latin alphabet letters are swapped for similar looking alternatives.

This is a filter added by you (or by an overzealous list maintainer), it does not happen by default or even with the provided additional filterlists.