[tor-bugs] #24421 [Applications/Tor Browser]: "Temporarilly allow all this page" gets inherited when New Identity is chosen.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Nov 27 11:48:08 UTC 2017


#24421: "Temporarilly allow all this page" gets inherited when New Identity is
chosen.
------------------------------------------+----------------------
     Reporter:  cypherpunks               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 How to reproduce:

 1. Open Tor Browser.
 2. Select "High" Security Setting.
 3. Go to https://github.com/
 4. Click on NoScript icon and choose "Temporarilly allow all this page".
 5. You can note that when the page gets refreshed the canvas prompt is
 displayed.
 6. Select New Identity in the Torbutton.
 7. Go to https://github.com/
 8. You can notice that the canvas prompt is displayed (meaning JS is
 enabled, which in turn implies that "Temporarilly allow all this page"
 gets inherited when New Identity is chosen.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24421>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list