Opened 7 years ago

Closed 6 years ago

Last modified 6 years ago

#5289 closed defect (fixed)

Disable IndexDB

Reported by: mikeperry Owned by: mikeperry
Priority: High Milestone: TorBrowserBundle 2.2.x-stable
Component: Firefox Patch Issues Version:
Severity: Keywords: MikePerry201204
Cc: Actual Points: 0.5
Parent ID: Points: 0.5
Reviewer: Sponsor:

Description

Firefox mumblepointoh added official support for the IndexDB API, which is yet another storage mechanism we have to worry about: https://developer.mozilla.org/en/IndexedDB

It appears IndexDB is disabled for third parties, and also prompts the user for permissions to store data for each site, but we should still be clearing it on New Identity.

Child Tickets

Change History (4)

comment:1 Changed 7 years ago by mikeperry

Keywords: MikePerry201203 added

comment:2 Changed 7 years ago by mikeperry

Keywords: MikePerry201204 added; MikePerry201203 removed

comment:3 Changed 6 years ago by mikeperry

Component: TorBrowserButtonFirefox Patch Issues
Resolution: fixed
Status: newclosed
Summary: Clear IndexDB on New IdentityDisable IndexDB

Looked into the IndexedDB source code and it's not easy to remove data from it. In fact, the thing does not even obey the private-browsing mode observer topic.

We're just going to disable it for now until it becomes more privacy friendly.

The patch to do so is in mikeperry/maint-2.2, and should be out in the next tbb release.

comment:4 Changed 6 years ago by mikeperry

Actual Points: 0.5
Points: 0.5
Note: See TracTickets for help on using tickets.