EIP-2026-103991

The writeup describes a URI obfuscation vulnerability in the Mozilla browser where a NULL byte (%00) in a user@location URI can hide the true destination of a link during mouseover. This could be exploited to trick users into clicking malicious links by displaying only the trusted portion of the URL.