Opened 13 months ago

Last modified 13 months ago

#26879 new defect

Disk leak on macOS due to Notification API

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-disk-leak, tbb-newnym
Cc: kmodi Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Konark Modi reported a while ago a disk leak at least on macOS due to the Notification API. Here is the bug report:

The leak is cause by: https://www.w3.org/TR/notifications/ API.

Steps to reproduce:
1. Visit http://www.bennish.net/web-notifications.html
2. Temporarily allow JS.
3. Click on Authorize button.
4. Click on Show button.
5. Notification should occur.


macOS by default saves these notification in`/private/var/folders/qs/54swlb5d1fx4hq969vdqg4rr0000gn/0/com.apple.notificationcenter/db` . It dumps the content of the notification and the website name.

This location can be found using:
Activity Monitor -> Search for process user noted -> Open files and ports -> Notifications DB.

Now, although the user opted in to these notifications, but this is an intended leak from OS level.

Child Tickets

Change History (2)

comment:1 Changed 13 months ago by gk

Cc: kmodi added; kmosi removed

comment:2 Changed 13 months ago by gk

Keywords: tbb-newnym added

Oh, and it seems this survives New Identity as well.

Note: See TracTickets for help on using tickets.