There’s a work around for the idn flaw which involves creating a file on the local machine. Looks complicated for a non-techie to install but works by only allowing alphanumeric (a-z and 1-9) as characters in a url. I guess it won’t be long before an official patch comes along though.
Comments
You also need to add characters such as _ (as I found out)