Private browsing navigated page leaked to non-private browsing tab back/forward stack.

RESOLVED INCOMPLETE

Status

()

Firefox
Private Browsing
--
critical
RESOLVED INCOMPLETE
2 years ago
8 months ago

People

(Reporter: Jukka Jylänki, Unassigned)

Tracking

({privacy})

48 Branch
x86
Windows 10
privacy
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

2 years ago
Don't have a clear way to STR, but witnessed this twice now.

Rough steps:

1. Open browser window with non-private browsing, multiple tabs open.
2. Tap ctrl-shift-P to open up private browsing window
3. Navigate some pages in private browsing mode, the original non-private browsing window being open in the background.
4. Close the private browsing window.
5. One of the tabs in the non-private browsing window gains a forward navigation action that takes navigatio to one of the pages from the private browsing mode.

After step five, looking at the navigation history of the non-private browsing window, the new page has appeared, but none of the navigation trail to that page exists in the history. It is as if one had directly typed the URL of the navigated private window URL to the browser bar in the non-private window.

Comment 1

2 years ago
Does this happen with specific websites? Are you using add-ons in the browser profile where you're seeing this? Does retracing the same steps reproducibly produce the same result?
Flags: needinfo?(jujjyl)
(Reporter)

Comment 2

2 years ago
I've tried to reproduce it by back and forward navigation, but haven't found a way to manually trigger.

I am not using any add-ons.

Typically the steps have had the browser open for a long time, e.g. PC sometimes hibernated over night, so I don't know where to look to narrow down what might have constituted to the essential part of a repro.
Flags: needinfo?(jujjyl)
Ehsan, maybe you want to take a look at this?

I think this is a privacy issue, not a security issue, so I'm unhiding.
Group: firefox-core-security
Flags: needinfo?(ehsan)
Keywords: privacy

Comment 4

2 years ago
I can't reproduce this.

Jukka, do you have any more information here?  The steps in comment 0 are very vague and this bug isn't actionable with some more information about how to reproduce.
Flags: needinfo?(ehsan) → needinfo?(jujjyl)
(Reporter)

Comment 5

2 years ago
Sorry, I've tried to stress test the feature to figure out how this would happen, but I don't have any better clue on how it happens exactly. I wonder if anyone has reported anything similar on bugzilla..
Flags: needinfo?(jujjyl)
Going thru the PBM bug backlog, closing bugs without reliable Steps to Reproduce. Please re-open with reliable STR if you still experience this. 

If I discover related and/or duplicate bugs to this one, I may re-open one of them as the single tracking bug for the issue.
Status: NEW → RESOLVED
Last Resolved: 8 months ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.