1169073 - Private browsing sending cookies from non-private contexts

Status: NEW

(Firefox :: Private Browsing, defect)

Description

[Adam Roach [:abr]]

Under 38.0.1 and 38.0.5, private browsing appears to be leaking cookies from non-private contexts in certain cases.

STR:

1. In a normal window, log into https://bugzilla.mozilla.org
2. Open a private browsing window and go to https://bugzilla.mozilla.org
3. Note that you are logged in to Bugzilla in the private window

Looking at the browser console, the browser is, in fact, sending "Bugzilla_login" and "Bugzilla_logincookie" cookies.

Reproducing this appears to be sporadic, although once I get a session to reproduce the behavior, it appears to continue to reproduce for the remainder of that session. It does not appear to be tied to my profile, as I've had Ethan Hugg independently reproduce it with his account/machine/browser/profile.

Comment 1

[Josh Matthews [:jdm]]

I haven't been able to reproduce this on nightly using e10s, fwiw.

Comment 2

[Adam Roach [:abr]]

(In reply to Josh Matthews [:jdm] from comment #1)
> I haven't been able to reproduce this on nightly using e10s, fwiw.

If you can't repro in Beta or Release, I'd be happy to pair with you to track down what's going on. I can make this happen quite easily.

Comment 3

[Adam Roach [:abr]]

I'm still seeing this in Beta 39.

Comment 4

[Josh Matthews [:jdm]]

Do you see this happen if you run in safe mode?

Comment 5

[Josh Matthews [:jdm]]

Alternatively, are you running in "Never remember history" mode?