Skip to content
This repository was archived by the owner on Jul 21, 2021. It is now read-only.
This repository was archived by the owner on Jul 21, 2021. It is now read-only.

Private mode data leakage in firefox #350

Open

Description

@ancipital

Steps to reproduce:

Open a private browsing window. Set some temporary permissions within any scope to make the site work. Close the private browsing window, if you wish.

Actual results:

The temporary permissions needed to make the site work remained visible within the rules list of umatrix's dashboard, when viewed from the normal (non-private) window. These included items like the domain name, leaving quite a large trail.

Expected results:

The temporary rules from the private browsing instance should not be viewable outside of the private browsing instance- and should be automatically destroyed when the user exits private browsing.

This may well be a umatrix rather than firefox bug- I don't know whether the way that the addon shares data between private and non-private browsing is normal. Either way, addons not being sandboxed/invoked separately between modes may lead to further problems of this type in future.

(Also filed as https://bugzilla.mozilla.org/show_bug.cgi?id=1203923 for consideration of firefox devs)

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions