[tor-commits] [torbutton/master] Bug 8382: Leave IndexedDB and Offline Storage disabled.

mikeperry at torproject.org mikeperry at torproject.org
Thu Mar 7 01:58:59 UTC 2013


commit 640dce2e2adf15a76da7f8cc798f7c59ac9ca309
Author: Mike Perry <mikeperry-git at fscked.org>
Date:   Wed Mar 6 17:56:28 2013 -0800

    Bug 8382: Leave IndexedDB and Offline Storage disabled.
    
    Offline Storage can be used as a third party tracking vector, and IndexedDB
    seems impossible to clear during New Identity.
---
 src/chrome/content/torbutton.js |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js
index e762402..55eb2bf 100644
--- a/src/chrome/content/torbutton.js
+++ b/src/chrome/content/torbutton.js
@@ -1535,12 +1535,14 @@ function torbutton_update_disk_prefs() {
 
     m_tb_prefs.setBoolPref("browser.privatebrowsing.autostart", mode);
     m_tb_prefs.setBoolPref("browser.cache.disk.enable", !mode);
-    m_tb_prefs.setBoolPref("dom.indexedDB.enabled", !mode);
+
+    // No way to clear this beast during New Identity. Leave it off.
+    //m_tb_prefs.setBoolPref("dom.indexedDB.enabled", !mode);
 
     if (m_tb_tbb) m_tb_prefs.setBoolPref("permissions.memory_only", mode);
 
-    // XXX: Third party abuse?
-    m_tb_prefs.setBoolPref("browser.cache.offline.enable", !mode);
+    // Third party abuse. Leave it off for now.
+    //m_tb_prefs.setBoolPref("browser.cache.offline.enable", !mode);
 
     if (mode) {
         m_tb_prefs.setIntPref("network.cookie.lifetimePolicy", 2);



More information about the tor-commits mailing list