[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #27452 [Applications/Tor Browser]: "New Identity" does not properly clear state of the find bar

#27452: "New Identity" does not properly clear state of the find bar
------------------------------------------+----------------------
     Reporter:  nsuchy                    |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 I noticed an issue with Tor Browser on macOS which likely affects Tor
 Browser on other platforms. The issue being that pressing "New Identity"
 does not properly clear state of the find bar.

 **Steps to reproduce:**
 1) Open Tor Browser
 2) Press control-f ("command-f" on macOS) to bring up the find bar
 3) Type something into the find bar.
 4) Press new identity
 5) Press control-f ("command-f" on macOS) again to bring up the find bar.
 See that the previously searched text remains in the box.

 **Tor Browser Alpha:**
 Per arma's suggestion on IRC I tested this in Tor Browser Alpha (This
 build: https://people.torproject.org/~gk/builds/8.0-build5/tor-browser-
 linux64-8.0_en-US.tar.xz) on Linux. The bug is partially fixed. However if
 you click "highlight all" after entering text in the search box and then
 press new identity, press control-f again, the text is cleared, but the
 "highlight all" state remains.

 **User Impact:**
 This appears to be an issue resetting state of the find bar. It's unclear
 whether a website can access this information using Javascript, with or
 without user interaction. It's also unclear how long this information
 could persist. This could potentially reveal during a forensic search on a
 computer the last thing the user searched for on a page, but not what page
 they searched on.

 It is worth investigating for other components which are not properly
 reset after clicking "New Identity".

 **Screenshots:**
 * Bug on Tor Browser Stable macOS
 https://image.ibb.co/bVOLkK/Screen_Shot_2018_09_04_at_8_23_20_PM.png
 * Bug on Tor Browser Alpha Linux https://image.ibb.co/fiVSXz/Problem.png

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27452>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs