[BUG] Address bar truncation hides registrable domain leading to URL spoofing risk

Aloha Browser (v8.3.1) improperly truncates long URLs in the address bar, hiding the registrable domain and showing only the beginning of the URL.

An attacker can craft a malicious URL such as:
https://trusted-site.com.attacker-domain.com

Due to truncation, users may only see trusted-site.com, leading to false trust and potential phishing or credential theft.

This behavior violates standard secure URL display practices where the registrable domain must remain visible.

1. Open Aloha Browser (v8.3.1)
2. Visit:
   https://long-extended-subdomain-name-containing-many-letters-and-dashes.badssl.com/
3. Observe the address bar
4. Notice the URL is truncated from the right and actual domain is not clearly visible

• URL spoofing / confusion
• Phishing risk
• Users may trust malicious domains

• https://hackerone.com/reports/2501378
• https://issues.chromium.org/issues/40058618
• https://issues.chromium.org/issues/40087176
• https://bugzilla.mozilla.org/show_bug.cgi?id=1941526