[tbb-bugs] #26879 [Applications/Tor Browser]: Disk leak on macOS due to Notification API

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jul 19 16:57:52 UTC 2018

#26879: Disk leak on macOS due to Notification API
     Reporter:  gk                        |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb-disk-leak
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
 Konark Modi reported a while ago a disk leak at least on macOS due to the
 Notification API. Here is the bug report:
 The leak is cause by: https://www.w3.org/TR/notifications/ API.

 Steps to reproduce:
 1. Visit http://www.bennish.net/web-notifications.html
 2. Temporarily allow JS.
 3. Click on Authorize button.
 4. Click on Show button.
 5. Notification should occur.

 macOS by default saves these notification
 . It dumps the content of the notification and the website name.

 This location can be found using:
 Activity Monitor -> Search for process user noted -> Open files and ports
 -> Notifications DB.

 Now, although the user opted in to these notifications, but this is an
 intended leak from OS level.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26879>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list