[nickfrostatx]

Given how important domain names are for security, it would be concerning if domain names get truncated.

I could craft:

evil.net/this-is-a-very-very-long-path/bankofamerica.com/account-settings/blah/blah/blah

Which, depending on how this is implemented, might render to

...bankofamerica.com/account-settings/blah/blah/blah

[notahacker]

this horse bolted long ago with ubiquitous shortURL services

[niccaluim]

The domain and path are truncated separately. Your example would be displayed as evil.net/this-is-a-very-very-lo…

[ludamad]

So evil-bank-of-america.net would do?

[niccaluim]

That wouldn't be truncated, no. It's not long enough.