[tor-bugs] #27824 [Applications/Tor Browser]: TorBrowser or NoScript 10 prevents cookies even if cookie exceptions are present

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Feb 9 21:50:04 UTC 2019


#27824: TorBrowser or NoScript 10 prevents cookies even if cookie exceptions are
present
--------------------------------------------+--------------------------
 Reporter:  joebt                           |          Owner:  tbb-team
     Type:  defect                          |         Status:  new
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  Tor Browser, NoScript, cookies  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by cypherpunks):

 It's still not fixed in TBB 8.5.  No time?

 With Torbutton security slider at safest (standard) or Safer, and Cookies
 & Site Data = Block; entering a session cookie exception:
 https://trac.torproject.org (or any site) doesn't allow exception domains
 to set even 1st party cookies.

 It works correctly when cookies are blocked in Fx 60.4esr (linux) & Fx
 quantum - now v65.0 (linux).

 Users shouldn't be forced to allow cookies globally, just to login one
 site;
 nor have to switch Allow / Block cookies back & forth when they don't want
 cookies allowed globally.

 Even if session cookies are allowed, third party cookies shouldn't be
 enabled by default.
 At least, that's the 3rd party cookie setting when Cookies & Site Data is
 enabled.

 That directly contradicts efforts to prevent third party tracking.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27824#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list