Changes between Initial Version and Version 1 of Ticket #23745, comment 5


Ignore:
Timestamp:
Oct 5, 2017, 8:08:48 PM (21 months ago)
Author:
arthuredelstein
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #23745, comment 5

    initial v1  
    2020But this does not happen if "dom.indexedDB.enabled" is true. I have yet to investigate why.
    2121
    22 In the meantime, I am trying to work out what our strategy should be for indexedDB.
    23 * indexedDB is a supercookie vector and has not yet been patched to respect first-party isolation in Tor Browser or Firefox.
     22In the meantime, I am trying to work out what our strategy should be for indexedDB. '''Update: I have learned two of the following items are no longer true:'''
     23* indexedDB is a supercookie vector ~~and has not yet been patched to respect first-party isolation in Tor Browser or Firefox.~~ '''(Actually patched as early as ESR52.)''
    2424* There is [https://bugzilla.mozilla.org/show_bug.cgi?id=781982 a Mozilla ticket] for enabling a memory-only indexeddb in Firefox but this has not been resolved. In other words, indexeddb always writes to disk.
    25 * As [https://trac.torproject.org/projects/tor/ticket/16528#comment:7 mikperry pointed out], there wasn't a good way to programmatically clear indexedDB databases. That issue may have been recently fixed in [https://bugzilla.mozilla.org/show_bug.cgi?id=1047098 Firefox] and we should investigate if we can use this in New Identity.
     25* As [https://trac.torproject.org/projects/tor/ticket/16528#comment:7 mikperry pointed out], there wasn't a good way to programmatically clear indexedDB databases. That issue may have been recently fixed in [https://bugzilla.mozilla.org/show_bug.cgi?id=1047098 Firefox] and we should investigate if we can use this in New Identity. '''(In fact, torbutton already apparently clears indexedDBs.)'''
    2626* In PBM, indexedDB is already effectively disabled, even when "dom.indexedDB.enabled" is true.
    2727* Modernizr was [https://github.com/Modernizr/Modernizr/pull/2030 updated] a year ago to correctly detect the absence of indexedDB in Firefox PBM.