[tor-bugs] #4430 [TorBrowserButton]: Fully Disable Session Store+Restore

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sat Apr 28 23:46:43 UTC 2012


#4430: Fully Disable Session Store+Restore
---------------------------------+------------------------------------------
    Reporter:  mikeperry         |       Owner:  mikeperry                     
        Type:  defect            |      Status:  closed                        
    Priority:  critical          |   Milestone:  TorBrowserBundle 2.2.x-stable 
   Component:  TorBrowserButton  |     Version:                                
  Resolution:  fixed             |    Keywords:  tbb-disk-leak, MikePerry201204
      Parent:                    |      Points:  1                             
Actualpoints:  1                 |  
---------------------------------+------------------------------------------

Comment(by cypherpunks):

 My sessionstore.js does not contain any urls either:
 http://pastebin.com/eWSnvqKC

 As you may imagine, storing the "title" of a website may expose some
 sensitive info too, even if urls are not present.

 Usually, just a single tab is stored. I'm not sure what triggers it yet.
 That "_shouldRestore":true is suspicious.

-- 
Ticket URL: <https://trac.torproject.org:443/projects/tor/ticket/4430#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list