Information leaks with automatic searching via URL bar.

[cypherpunks]

In the Tor browser, if you enter a malformed URL, it immediately thinks it's a search query and pushes that malformed URL over to the assigned default search (DDG, Startpage, etc)

This is a type of information leak.

It would be better if a malformed URL is entered and you press Enter, you're asked if you are sure you want to search for this or not.

It could be in a strip appears under the URL bar, like the strip that appears when you first run the Tor browser for the first time asking about the default configuration, or a popup from the URL bar, like the enable canvas or enable notification popups.

[cypherpunks]

Or it could be like the black strip that appears when you maximize the tor browser.

[Dbryrtfbcbhgf]

please ignore my comment.

[cypherpunks]

I suggest displaying Yes/No buttons and a Don't ask again checkbox. That shouldn't harm user experience that much, especially those who rely on the address bar for searching instead of the little Search box on the top right.