commit 640dce2e2adf15a76da7f8cc798f7c59ac9ca309 Author: Mike Perry mikeperry-git@fscked.org Date: Wed Mar 6 17:56:28 2013 -0800

Bug 8382: Leave IndexedDB and Offline Storage disabled.

Offline Storage can be used as a third party tracking vector, and IndexedDB seems impossible to clear during New Identity. --- src/chrome/content/torbutton.js | 8 +++++--- 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index e762402..55eb2bf 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -1535,12 +1535,14 @@ function torbutton_update_disk_prefs() {

m_tb_prefs.setBoolPref("browser.privatebrowsing.autostart", mode); m_tb_prefs.setBoolPref("browser.cache.disk.enable", !mode); - m_tb_prefs.setBoolPref("dom.indexedDB.enabled", !mode); + + // No way to clear this beast during New Identity. Leave it off. + //m_tb_prefs.setBoolPref("dom.indexedDB.enabled", !mode);

if (m_tb_tbb) m_tb_prefs.setBoolPref("permissions.memory_only", mode);

- // XXX: Third party abuse? - m_tb_prefs.setBoolPref("browser.cache.offline.enable", !mode); + // Third party abuse. Leave it off for now. + //m_tb_prefs.setBoolPref("browser.cache.offline.enable", !mode);

if (mode) { m_tb_prefs.setIntPref("network.cookie.lifetimePolicy", 2);