Two possible spoofing methods for WP edition UC Browser/Baidu Browser

Small problems caused by mobile browser Full Screen Processing
UC browser WP in extreme mode using http: // xxx: xxx@xxx.com/when accessing a page, "You are about to log in to the site" xxx.com "with the username ......" Too long = see the figure, but if you exit the quick mode, the above statement will not be displayed

After exiting the fast mode, using the http://aaaaaaaaa.xxxxxxx.baidu.com: x@evil.com will go directly to evil.com.

Mobile browsers are usually full-screen, and the address bar and title bar are merged to save space. However, some browsers do not limit the content displayed in the title bar, as shown below:

UC Browser:

Baidu Browser:

 

Solution:

Just filter the title.