#27452: "New Identity" does not properly clear state of the find bar ------------------------------------------+---------------------- Reporter: nsuchy | Owner: tbb-team Type: defect | Status: new Priority: Medium | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Keywords: Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | ------------------------------------------+---------------------- I noticed an issue with Tor Browser on macOS which likely affects Tor Browser on other platforms. The issue being that pressing "New Identity" does not properly clear state of the find bar.
**Steps to reproduce:** 1) Open Tor Browser 2) Press control-f ("command-f" on macOS) to bring up the find bar 3) Type something into the find bar. 4) Press new identity 5) Press control-f ("command-f" on macOS) again to bring up the find bar. See that the previously searched text remains in the box. **Tor Browser Alpha:** Per arma's suggestion on IRC I tested this in Tor Browser Alpha (This build: https://people.torproject.org/~gk/builds/8.0-build5/tor-browser- linux64-8.0_en-US.tar.xz) on Linux. The bug is partially fixed. However if you click "highlight all" after entering text in the search box and then press new identity, press control-f again, the text is cleared, but the "highlight all" state remains. **User Impact:** This appears to be an issue resetting state of the find bar. It's unclear whether a website can access this information using Javascript, with or without user interaction. It's also unclear how long this information could persist. This could potentially reveal during a forensic search on a computer the last thing the user searched for on a page, but not what page they searched on. It is worth investigating for other components which are not properly reset after clicking "New Identity". **Screenshots:** * Bug on Tor Browser Stable macOS https://image.ibb.co/bVOLkK/Screen_Shot_2018_09_04_at_8_23_20_PM.png * Bug on Tor Browser Alpha Linux https://image.ibb.co/fiVSXz/Problem.png -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27452> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs