Opened 5 months ago

Last modified 5 months ago

#26125 needs_information task

Javascript's localStorage/sessionStorage is not working.

Reported by: cypherpunks Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

To whom it may concern,

We're allowing Tor users to read our websites. We are using sessionStorage to save temporary information.

Unfortunatelly some Tor users reported us about Javascript error, and we downloaded your software to check their claim.

Steps to reproduce:

  1. Open Tor Browser.
  2. Open any website, such as this current page https://trac.torproject.org/projects/tor/newticket
  3. Press [F12] key to open "Developer Tools" and click "Console".
  4. Type "sessionStorage.length".

Result:
SecurityError: The operation is insecure.

It seems your browser's Storage API is broken.
We have no problems when we tried latest Mozilla Firefox and Google Chrome.

Result (Firefox 60):
0

Please fix your browser to meet Mozilla's default standard.

--
Rick W.

Child Tickets

Attachments (1)

err.jpg (24.4 KB) - added by cypherpunks 5 months ago.

Download all attachments as: .zip

Change History (5)

comment:1 Changed 5 months ago by cypherpunks

And we highly value Tor Browser's Anonymity-first development.
But disabling(removing?) such API will break Javascript applications.

Instead of removing localStorage/sessionStorage code, why not:
a) Treat all "localStorage"(long term) as "sessionStorage"(short term).
b) Enable "sessionStorage" by default, like Mozilla Firefox provides.
c) When the user close the tab or click "New Identity", clear local|sessionStorage.

comment:2 Changed 5 months ago by gk

Status: newneeds_information

I just took a clean, new Tor Browser 7.5.4 and performed your steps to reproduce the problem. And I get the expected result 0 and not the error. So, this is working on my Linux box. On what OS have you been testing? Did you make any modifications to Tor Browser? If so, which?

comment:3 Changed 5 months ago by cypherpunks

@gk

Tried above step and got same result.
Im using Tor browser since version 6.
Updated to 7.5.4(32bit). Using Windows 7 64bit. HTH

Changed 5 months ago by cypherpunks

Attachment: err.jpg added

comment:4 Changed 5 months ago by cypherpunks

Maybe this will be resolved when you upgrade TB to 60 ESR, but...

Note: See TracTickets for help on using tickets.