Patch for trunk. Same as Y20 patch. Just changes the base to 10 rather than 16.
Hong, I like your approach and will open another JIRA to address the general shortcoming of the normalizeHostname function. For this one I'd like to take as little risk as possible.
I considered writing a unit test for the fix that would try to normalize some host name that starts with an offending hostname (ask.com), but this would violate the unit-test-shouldn't-talk-to-outside-resources guideline, and couldn't think of a better way to test it. If someone has one, let me and I'll add it. Otherwise, I think it's good to go without one.