#25072: New Identity does not clear extension storage
-------------------------------------------------------+------------------
Reporter: kmodi | Owner: jsha
Type: defect | Status: new
Priority: Medium | Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------------------------------------+------------------
When "New Identity" button is pressed, the information stored by
extensions like HTTPS Everywhere is not cleared.
This might contain information, like domains which the user added as an
exception.
Because, this persists on disk and is not cleared on Tor shoutdown or
manually clicking "New Identity", it leaves traces of users browsing
habits.
Steps to reproduce:
1. Visit a website like cnn.com.
2. Click on HTTPS Everywhere Icon, and uncheck CNN.COM.
3. Restart Tor or Click on New Identity,
4. Visit the same site again, the setting is remembered by extension.
Data on disk:
~/Library/Application\ Support/TorBrowser-Data/Browser/profile/browser-
extension-data/https-everywhere-
[email protected]/storage.js:{"ruleActiveStates":{"CNN.com
(partial)":false},"migration_version":1}
Ideally, extensions should be careful while saving data to disks. But may
be Tor can also clear the storage on New Identity.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25072>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
