[tor-bugs] #24784 [- Select a component]: New Identity doesn't revoke temporary javascript permissions

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jan 3 14:53:47 UTC 2018


#24784: New Identity doesn't revoke temporary javascript permissions
--------------------------------------+--------------------
     Reporter:  mercedes508           |      Owner:  (none)
         Type:  defect                |     Status:  new
     Priority:  Medium                |  Milestone:
    Component:  - Select a component  |    Version:
     Severity:  Normal                |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |   Reviewer:
      Sponsor:                        |
--------------------------------------+--------------------
 In Tor Browser, if you temporarily allow a Website to use JavaScript and
 use the New Identity button and go back to the exact same website
 afterwards no script will forget that it granted temporary access to it
 pre-new identity yet allow scripts to be executed nonetheless

 This issue has been reproduced on both Tails 3.3 and Tor Browser 7.0.11
 running on Debian stable.

 It's been reported on Tails bug tracker first:
 https://labs.riseup.net/code/issues/15140

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24784>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list