Our built in phishing detector has static tests, one of which involves looking for ipv4 host names in the url. We should make it smart enough to detect ipv6 as well. This could be a good starter bug for someone looking to get involved.

I started to look at this. So the first thing I tried was mailing me a mail containing an IPv6 address. The problem was the

Sorry for the last comment. Just ignore it. This is my try to add IPv6 support to the phishing detector. I also made some changes to the IPv4 detection. As local address I added fe80::/64 which is listed on wikipedia as The link-local prefix. One question is that ::ffff:0:0/96 exists for mapping IPv4 addresses. Should ::ffff:192.16.*.* count as a local address (and the same for the other IPv4 local addresses)? Then there exists fc00::/7 (Unique Local Addresses (ULA)) should I add that as a local address? Info about the special addresses I found on Wikipedia: http://en.wikipedia.org/wiki/IPv6#Special_addresses

Of cause I found an error almost directly.

Comment on attachment 267155 [details] [diff] [review] patch #2 >+ return (this.isIPv6HostName(aHostName, aUnobscuredHostName) || >+ this.isIPv4HostName(aHostName, aUnobscuredHostName)); Since v4 is much more likely, move that first. >+ /** >+ * Private helper method. >+ * @return unobscured host name (if there is one) >+ * @return true if aHostName is an IPv4 address The first return should probably be @param aUnobscuredHostName <description of the side effect> Same thing later... >+ isIPv4HostName: function(aHostName, aUnobscuredHostName) >+ { > var index; It's more readable if you declare loop variables inside the for clause | for (var i = 0 ... |, in cases where they aren't used for anything outside it. Same thing for "count" later on. Other than that, looks ok to me; r=mkmelin+mozilla@iki.fi

Emil, do you mind posting a new patch with Magnus's comments? I'll sr that new patch, I don't see any additional comments. Thanks!

Scott, the only problem is that I'm on vacation which mean that I will not have access to my computer until the end of July. So if there is no hurry I can fix it then. But if you want it before that I have no problem with someone else take my patch and fixes the review comments.

Emil: any update on the patch?

Emil: ping on an updated patch?

need no owner for this patch. emil is no longer using thunderbird afaik, so resetting assignee to nobody

Unbitrotted version of the one I reviewed a year ago. I also changed some functions so that we wouldn't pass unobscuredHostName and rely on side effects, as it's soo ugly and hard to read in js (when there's no real need for it).

Comment on attachment 347851 [details] [diff] [review] proposed fix Looks fine, which means it's time for grammar nits :) >+ * Check if a host name is and IPv4 host name. an >+ // Make sure there is at least 3 components. >+ // Make sure there is 8 components. are rather than is

changeset: 1124:8ad921a602ef http://hg.mozilla.org/comm-central/rev/8ad921a602ef ->FIXED