• Emily Stark's avatar
    Simplified domains: ignore private registries · 26234395
    Emily Stark authored
    This CL ignores private registries when computing the simplified
    domain, i.e. registrable domain. For example, "foo.example.com" will
    be simplified to "example.com", and "foo.blogspot.com" will be
    simplified to "blogspot.com". (Note that as of
    https://chromium-review.googlesource.com/c/chromium/src/+/2337761, the
    simplified domain logic only applies in unusual cases; most of the
    time, we show the full hostname).
    
    The reason for ignoring private registries is that we don't want to
    create negative incentives for malicious websites to add themselves as
    private registries to the Public Suffix List.
    
    This policy isn't perfect, but we think it best balances the security
    benefit of eliding malicious subdomains while minimally impacting
    benign websites that use subdomains.
    
    Bug: 1106962
    Change-Id: Ifb75a510707c1dcac0825f899625069656838932
    Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2356936Reviewed-by: default avatarTommy Li <tommycli@chromium.org>
    Commit-Queue: Emily Stark <estark@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#798230}
    26234395
omnibox_view_views.cc 111 KB