부가 기능
GlyphSentry 0.1
제작: daoluong
Guards your inbox against look-alike characters: highlights non-Latin letters, mixed-script homographs and invisible Unicode controls, and flags addresses that contain non-Latin characters or an unfamiliar domain.
부가 기능 정보
## What GlyphSentry does
GlyphSentry marks the characters that phishing messages hide behind: letters from
another alphabet that look like Latin letters, and invisible Unicode controls that
can reorder or hide text. It also renders email addresses and links in a monospace
font, so a substituted glyph is easier to notice.
Everything happens in the message pane of the message you are reading. The original
message is never modified, nothing is uploaded, and no data leaves your computer.
## Where to find it
**Toolbar button — the main entry point.**
A GlyphSentry button is added to the Thunderbird toolbar. Click it to switch
highlighting off or on for the message that is currently open. While highlighting
is off for that message, the button shows an **OFF** badge.
If the button is not visible, right-click the toolbar, choose **Customise...**, and
drag the GlyphSentry button onto the toolbar.
**Settings page.**
Open **Tools → Add-ons and Themes** (`Ctrl+Shift+A`), select **GlyphSentry**, and
open its **Options / Preferences** page. From there you can:
- enable or disable highlighting;
- choose the detection mode (**Non-Latin**, **Mixed-script**, **Security**);
- pick the highlight text and background colours;
- choose which scripts are marked;
- force email addresses and URLs to monospace;
- enable or disable the address warnings and the sender banner;
- restore the defaults.
**Inside the message.**
Warnings appear directly in the message pane: a red ⚠ badge next to suspicious
addresses, a `U+XXXX` badge in place of an invisible character, and — if enabled —
a warning banner at the top of the message when the sender's domain is not one of
your account's domains.
## How to use it
1. Install GlyphSentry and open any message. Highlighting runs automatically.
2. Check the marked characters. If a message is legitimately written in another
script (a Japanese newsletter, for example), click the toolbar button to turn
highlighting off for that message only. Click it again to turn it back on.
3. Open the settings page to change the detection mode or the colours, or to
disable individual warnings.
## Detection modes
| Mode | What it marks | Best for |
| --- | --- | --- |
| Non-Latin | Every letter outside the Latin script (Greek, Cyrillic, Arabic, Hebrew, CJK, ...) | Maximum visibility |
| Mixed-script | Only foreign letters inside a word that also contains Latin letters, e.g. `раypal.com` or `microsοft.com` | Everyday use; quiet for multilingual mail |
| Security | Mixed-script plus invisible characters (bidi controls, zero-width and tag characters), shown as `U+XXXX` | Suspicious messages |
Latin text, including Vietnamese diacritics such as ế, ộ and đ, is never marked.
A mixed-script hit is a warning signal, not proof that a message is malicious.
## Monospace and address warnings
- **Monospace for email addresses** — anything that looks like `name@example.com`
is rendered in a monospace font.
- **Monospace for domains and URLs** — `https://example.com`, `www.example.com`
and bare domains are rendered in a monospace font.
- **Non-Latin addresses** — an address such as `раypal@example.com` or
`user@пример.com` gets a red ⚠ badge and a dotted underline, even when the
domain matches yours. Vietnamese and other Latin diacritics are not affected.
- **Foreign domains** — addresses from a domain other than your own get a small ⚠
badge; hovering the badge shows which domain was compared. Sub-domains of your
own domain count as internal.
- **Sender banner** — when the sender's domain is not one of your account's
domains, a warning banner is shown at the top of the message.
## Privacy and permissions
GlyphSentry makes no network requests, has no telemetry and keeps everything in
Thunderbird's local storage. Requested permissions:
- **storage** — save your settings and the list of messages for which you turned
highlighting off.
- **messagesRead** — read the header of the message being displayed (sender and
message ID) to compare domains. The message body is never read from disk or from
the server; the add-on only walks the part of the message that Thunderbird has
already rendered.
- **accountsRead** — read the domains of your own accounts to decide what a
"foreign domain" is.
- **scripting** — inject the highlighting script into the message pane.
No host permissions are requested.
## Compatibility
Thunderbird 128.0 and later, HTML and plain-text messages, light and dark themes.
## Source code
MIT-licensed source code and issue tracker:
<https://github.com/daoluong/GlyphSentry>
GlyphSentry marks the characters that phishing messages hide behind: letters from
another alphabet that look like Latin letters, and invisible Unicode controls that
can reorder or hide text. It also renders email addresses and links in a monospace
font, so a substituted glyph is easier to notice.
Everything happens in the message pane of the message you are reading. The original
message is never modified, nothing is uploaded, and no data leaves your computer.
## Where to find it
**Toolbar button — the main entry point.**
A GlyphSentry button is added to the Thunderbird toolbar. Click it to switch
highlighting off or on for the message that is currently open. While highlighting
is off for that message, the button shows an **OFF** badge.
If the button is not visible, right-click the toolbar, choose **Customise...**, and
drag the GlyphSentry button onto the toolbar.
**Settings page.**
Open **Tools → Add-ons and Themes** (`Ctrl+Shift+A`), select **GlyphSentry**, and
open its **Options / Preferences** page. From there you can:
- enable or disable highlighting;
- choose the detection mode (**Non-Latin**, **Mixed-script**, **Security**);
- pick the highlight text and background colours;
- choose which scripts are marked;
- force email addresses and URLs to monospace;
- enable or disable the address warnings and the sender banner;
- restore the defaults.
**Inside the message.**
Warnings appear directly in the message pane: a red ⚠ badge next to suspicious
addresses, a `U+XXXX` badge in place of an invisible character, and — if enabled —
a warning banner at the top of the message when the sender's domain is not one of
your account's domains.
## How to use it
1. Install GlyphSentry and open any message. Highlighting runs automatically.
2. Check the marked characters. If a message is legitimately written in another
script (a Japanese newsletter, for example), click the toolbar button to turn
highlighting off for that message only. Click it again to turn it back on.
3. Open the settings page to change the detection mode or the colours, or to
disable individual warnings.
## Detection modes
| Mode | What it marks | Best for |
| --- | --- | --- |
| Non-Latin | Every letter outside the Latin script (Greek, Cyrillic, Arabic, Hebrew, CJK, ...) | Maximum visibility |
| Mixed-script | Only foreign letters inside a word that also contains Latin letters, e.g. `раypal.com` or `microsοft.com` | Everyday use; quiet for multilingual mail |
| Security | Mixed-script plus invisible characters (bidi controls, zero-width and tag characters), shown as `U+XXXX` | Suspicious messages |
Latin text, including Vietnamese diacritics such as ế, ộ and đ, is never marked.
A mixed-script hit is a warning signal, not proof that a message is malicious.
## Monospace and address warnings
- **Monospace for email addresses** — anything that looks like `name@example.com`
is rendered in a monospace font.
- **Monospace for domains and URLs** — `https://example.com`, `www.example.com`
and bare domains are rendered in a monospace font.
- **Non-Latin addresses** — an address such as `раypal@example.com` or
`user@пример.com` gets a red ⚠ badge and a dotted underline, even when the
domain matches yours. Vietnamese and other Latin diacritics are not affected.
- **Foreign domains** — addresses from a domain other than your own get a small ⚠
badge; hovering the badge shows which domain was compared. Sub-domains of your
own domain count as internal.
- **Sender banner** — when the sender's domain is not one of your account's
domains, a warning banner is shown at the top of the message.
## Privacy and permissions
GlyphSentry makes no network requests, has no telemetry and keeps everything in
Thunderbird's local storage. Requested permissions:
- **storage** — save your settings and the list of messages for which you turned
highlighting off.
- **messagesRead** — read the header of the message being displayed (sender and
message ID) to compare domains. The message body is never read from disk or from
the server; the add-on only walks the part of the message that Thunderbird has
already rendered.
- **accountsRead** — read the domains of your own accounts to decide what a
"foreign domain" is.
- **scripting** — inject the highlighting script into the message pane.
No host permissions are requested.
## Compatibility
Thunderbird 128.0 and later, HTML and plain-text messages, light and dark themes.
## Source code
MIT-licensed source code and issue tracker:
<https://github.com/daoluong/GlyphSentry>
