From f7ffd2f7dffd911e37f6a638bb410bd71da23491 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Br=C3=BCning?= Date: Mon, 16 Mar 2020 17:40:37 +0100 Subject: Fixup for [Backport] CVE-2020-6401 (2/3) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit b88a10e7a666792cc8a2d9a9310748a79b1f032b accidentally removed a return statement. Add it again. Change-Id: I358f7929b42779e2bea64dcb306884d484cb2743 Reviewed-by: Jüri Valdmann --- chromium/components/url_formatter/spoof_checks/idn_spoof_checker.cc | 1 + 1 file changed, 1 insertion(+) diff --git a/chromium/components/url_formatter/spoof_checks/idn_spoof_checker.cc b/chromium/components/url_formatter/spoof_checks/idn_spoof_checker.cc index 6afb8b9e736..f707e780d76 100644 --- a/chromium/components/url_formatter/spoof_checks/idn_spoof_checker.cc +++ b/chromium/components/url_formatter/spoof_checks/idn_spoof_checker.cc @@ -316,6 +316,7 @@ bool IDNSpoofChecker::SafeToDisplayAsUnicode( // Disallow Icelandic confusables for domains outside Iceland's ccTLD (.is). if (label_string.length() > 1 && top_level_domain != "is" && icelandic_characters_.containsSome(label_string)) + return false; // Disallow Latin Schwa (U+0259) for domains outside Azerbaijan's ccTLD (.az). if (label_string.length() > 1 && top_level_domain != "az" && -- cgit v1.2.1