[tbb-bugs] #27824 [Applications/Tor Browser]: TorBrowser or NoScript 10 prevents cookies even if cookie exceptions are present

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Feb 10 12:02:54 UTC 2019


#27824: TorBrowser or NoScript 10 prevents cookies even if cookie exceptions are
present
--------------------------------------------+--------------------------
 Reporter:  joebt                           |          Owner:  tbb-team
     Type:  defect                          |         Status:  new
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  Tor Browser, NoScript, cookies  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by Thorin):

 Why are you playing with your ~~food~~ cookies? Leave them alone.

 > third party cookies shouldn't be enabled by default

 **They're not.** - a default new Tor Browser & profile (8.0.5) has a
 slider setting of "standard" and cookies are enabled for **1st party
 only**. `network.cookie.cookieBehavior` is set at `1`, you can see this in
 about:preferences#privacy where "Accept third party cookies and data" =
 "Never".

 The only reason you have 3rd party cookies at "Always" is because you were
 playing with the settings. The logic behind the "Accept cookies and site
 data (recommended)" UI, when changing from unchecked to checked, is to
 reset the child option for 3rd party cookies to "Always". That's your
 issue, and it's due to code from Mozilla.

 Maybe that's something that TB could address with a patch. Force 3rd party
 cookie option to always be "Never" and to disable it (the same as the
 "Keep until" option)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27824#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list