1352788 - Cookies are still seen by CCleaner Cookie Manager even when deleted or when closing private browsing

Status: RESOLVED INVALID

(External Software Affecting Firefox :: Other, defect)

Description

[Kenny D]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko/20100101 Firefox/54.0
Build ID: 20170401004003

Steps to reproduce:

1. Browse normally or use private browsing and accumulate cookies.
2. Clear cookies and close private browsing.
3. Open up CCleaner and go to Options -> Cookies


Actual results:

You still see cookies are still being read somewhere by CCleaner, even the private browsing cookies are still shown. Also, the private browsing cookies are appended with for example "google.com^privatebrowsingid=1".


Expected results:

CCleaner should not have seen those cookies. Not sure how CCleaner detects them but it is clear that those cookies are being read somehow and is a major privacy risk. If CCleaner can read it then other software on the computer can read it as well.

Comment 1

[Loic]

You said CC detects cookies, but did you verified they are really present in your profile after cleaning cookies?

Comment 2

[Kenny D]

(In reply to Loic from comment #1)
> You said CC detects cookies, but did you verified they are really present in
> your profile after cleaning cookies?

I checked cookies.sqlite using a database browser and I can confirm that there are no cookies after using Firefox's cookie manager to delete cookies. I did find that when you right click on a individual cookie in CCleaner and click "Delete Now". In resource monitor, you can see CCleaner is writing to cookies.sqlite, cookies.sqlite-wal, webappsstore.sqlite, and webappsstore.sqlite-wal (See attached). So if the cookies that CCleaner is detecting is not in cookies.sqlite, then they are in cookies.sqlite-wal? Also, I can't seem to access cookies.sqlite-wal using DB Browser.

Comment 3

[Kenny D]

Attachment: CCleaner Deleting Cookies.png

Comment 4

[Loic]

Are you sure it's not the cookie related to SafeBrowsing provided by Google? This service needs a cookie to work and is created automatically by Firefox.

Comment 5

[Kenny D]

No, CCleaner is detecting cookies related to my browsing and private browsing even after they are deleted from Firefox. So someone can use CCleaner on my local machine and find out which sites I been to even though the cookies seem to be deleted.

Comment 6

[Kenny D]

Can you confirm that this is the case?

Comment 7

[Loic]

I don't have CC and I'll not install it not test. Maybe try to delete all files related to cookies in your profile and try again.
That said, CC has a long history of bugged behaviour with Firefox at different levels.

Comment 8

[Benjamin Smedberg]

We are not going to diagnose and fix this bug in Firefox. Please file your bug report with CCleaner.