[hackerone] homepage homograph attack

[diracdeltas]

Test plan

#11006 (comment)

---

from https://hackerone.com/bugs?report_id=268984&subject=brave:

Steps To Reproduce:

In browser add homepage with IDN @ebаy.com/ or just ebаy.com/
now close and open browser again
click the homepage button. you can see it's redirect to http://xn--eby-7cd.com/

expected result: in the 'home button' field in about:preferences, it should show '@xn--eby-7cd.com/' instead of '@ebаy.com/'

video https://www.youtube.com/watch?v=UgN-XJew9Es&feature=youtu.be

[diracdeltas]

Actually this works even if you don't prefix the URL with '@'. Updating issue accordingly.