mirror of
https://github.com/hanzoai/brand.git
synced 2026-10-23 03:05:28 +00:00
zeekay
387a35e36d
normalizeHost strips trailing FQDN root dot(s) after the port strip, so a real brand FQDN (lux.network.) resolves to ITS brand instead of the default — without ever widening a match, since stripping root dots cannot change a host's registrable domain. Expand the resolver test across the attack surface: homoglyph/IDN/punycode, suffix-confusion, control-char/null/injection, IP/localhost, trailing-dot FQDN, multi-suffix, and a broad independent-model sweep. Every non-exact host falls to the default; no sibling-brand leak. 19/19 green.