Long URLs are truncated and ellipsized, e.g.:
this-is-a-long-url-with-a-very-very-very-domain-name.com/and-a-sorta-long-path-component-but-still-long-enough-to-trigger-shortening
is displayed as
…with-a-very-very-very-domain-name.com/and-a-sorta-lo…
this-is-a-long-url-with-a-very-very-very-domain-name.com/and-a-sorta-long-path-component-but-still-long-enough-to-trigger-shortening
is displayed as
…with-a-very-very-very-domain-name.com/and-a-sorta-lo…
I could craft:
evil.net/this-is-a-very-very-long-path/bankofamerica.com/account-settings/blah/blah/blah
Which, depending on how this is implemented, might render to
...bankofamerica.com/account-settings/blah/blah/blah