[tbb-bugs] #22711 [Applications/Tor Browser]: Cookie protections dialog cannot delete cookies after upgrade

[Tor Bug Tracker & Wiki]

#22711: Cookie protections dialog cannot delete cookies after upgrade
------------------------------------------+-----------------------------
     Reporter:  CIA_jews_negro            |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Immediate                 |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Critical                  |   Keywords:  cookies, cookie
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+-----------------------------
 Cookie protections dialog cannot delete cookies after I upgraded
 TorBrowser and restarted it.

 1. Had TorBrowser 6.5.x (running)
 2. Updated to 7.0.1
 3. Killed TorBrowser process
 4. Started TorBrowser (7.0.1)
 5. Tabs got recovered (NOTE: for some reason didn't show me tab recovery
 dialog)
 6. Now when I use Cookie protections dialog, I click to delete cookies,
 but when I click OK and close dialog, all cookies are still there!!! I
 reopen Cookie protections dialog and they are still in. They aren't
 protected but behave like they were.
 7. When I open Tools->Options->Privacy->cookies, I can properly delete
 cookies from there.

 I haven't restart browser yet so don't know if it happens after restart.

 It's critical privacy bug. You think you deleted cookies so you reload
 page with new circuit, but in fact, you are using your old cookies and
 they will know it's same person. They will link your two accounts.

 Also, when I click to protect or unprotect cookie in the dialog, and click
 OK, it gets saved. When I reopen dialog I see that it's saved what I
 protected. But cannot delete cookies.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22711>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online