clients/apps
Alex 41c547015d
[PM-32843] Fix phishing blocker not blocking HTTPS variants of HTTP URLs (#19265)
* fix(phishing): check alternate protocol when matching URLs against block list

The phishing blocker's IndexedDB lookup only checked the exact URL href.
When the block list contains http:// entries but the browser auto-redirects
to https://, the lookup failed silently. This adds O(1) alternate-protocol
lookups (swapping http:// ↔ https://) with the same trailing-slash
normalization.

[PM-32843]

* test(phishing): add unit tests for alternate-protocol URL matching

Covers HTTP→HTTPS and HTTPS→HTTP matching, trailing slash normalization
with protocol swap, short-circuit when exact match is found, no false
positives, and non-HTTP protocol handling.

[PM-32843]
2026-03-16 11:21:50 -07:00
..
browser [PM-32843] Fix phishing blocker not blocking HTTPS variants of HTTP URLs (#19265) 2026-03-16 11:21:50 -07:00
cli [Tools] Update event-related import statements (#19548) 2026-03-14 09:11:30 +10:00
desktop [deps]: Pin Rust crate rkyv to v0.8.14 (#19579) 2026-03-16 08:13:53 -06:00
web [CL-1033] Migrate admin console CTAs to new icon API (#19482) 2026-03-16 11:36:29 -04:00