Closed Bug 313183 Opened 19 years ago Closed 19 years ago

"Clear Private Data" doesn't delete "Javascript Console" warnings and errors, which can contain history information

Categories

(Firefox :: Bookmarks & History, enhancement)

1.5.0.x Branch
x86
Windows XP
enhancement
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 322169

People

(Reporter: mario.ernst, Unassigned)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051006 Firefox/1.4.1 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051006 Firefox/1.4.1 Though the user clears the "Browsing History" in "Clear Private Data" parts of the history could be tracked by "Javascript Console" information (errors and warnings). Reproducible: Always
Version: unspecified → 1.5 Branch
Severity: normal → enhancement
Status: UNCONFIRMED → NEW
Ever confirmed: true
I'm glad someone filed this before I discovered it today! Especially considering that CSS issues are shown as "JavaScript errors", almost every web site in the world will throw a few errors into the JavaScript console. Reconstructing a rudimentary browser history from this log is trivial. Clearing of browser history should definitely clear the console. Related: many web sites use "cookie-less" authentication via a session key in their URIs. If the user selects to clear "Authenticated Sessions" in the Clear Private Data dialog, the JavaScript console should also be cleared to prevent someone from using any embedded authentication keys that might show up in JavaScript error URLs.
*** This bug has been marked as a duplicate of 322169 ***
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Component: History → Bookmarks & History
QA Contact: history → bookmarks
You need to log in before you can comment on or make changes to this bug.