[tor-bugs] #27952 [Applications/Tor Browser]: Using undo in the search reveals previous queries and sites visited

[Tor Bug Tracker & Wiki]

#27952: Using undo in the search reveals previous queries and sites visited
--------------------------------------+----------------------------
 Reporter:  anadahz                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  worksforme
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+----------------------------
Changes (by gk):

 * status:  needs_information => closed
 * resolution:   => worksforme


Comment:

 Replying to [comment:3 anadahz]:
 > > Do you have some steps to reproduce this bug report? I just entered
 "test" in the comment textbox and did a Ctrl+Z (aka Undo) but nothing
 happened. How can I see your issue.
 >
 > 1. Press `Ctrl+l`, type `test` and press enter (by default this should
 query the default search engine for the string `test`)
 > 2. Press `Ctrl+l`, type `test2` and press enter
 > 3. Press `Ctrl+l`, type `test3` and press enter
 > 4. Press `Ctrl+l` and `Ctrl+z` (only) consecutive times to reveal the
 previous searched queries: `test`, `test2` and `test3`.
 >
 > > In general, though, as long as you are in the same session and did not
 request a "New Identity" I think this is not unexpected.
 >
 > That is what I also thought that is an expected behavior, ideally it
 will be good to have a "always forget my previous history during an active
 session" config option.

 I am not sure why that would be good as long as web content does not have
 access to the history (which is does not have AFAICT). So, I think this
 works for us right now.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27952#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online