1898533 - "Forget about this page" removes website from "Delete cookies and site data when Firefox is closed" exception

Status: NEW

(Toolkit :: Data Sanitization, defect, P3)

Description

[Manuel Bucher [:manuel]]

Steps to reproduce:

1. Go to "Settings" -> "Privacy & Security".
2. Add "https://example.com" to "Manage Exceptions"
3. Visit https://example.com
4. View history (ctrl + h), right click on example.com and click "Forget about this page"
5. Go back to "Manage Exceptions" and see https://example.com missing

Expected results:

• site exceptions should have kept the entry of https://example.com

It was a bit unexpected to me to be logged out of the page on each shutdown after forgetting about the page to fix some caching-bug.

Comment 1

[Emma Zühlcke [:emz]]

Gijs, do you think we should treat these exceptions the same way as we treat passwords and bookmarks for "Forget about this site"?

Comment 2

[Emma Zühlcke [:emz]]

I'm wondering generally if clear on shutdown site exceptions should never be cleared when going through any data clearing surfaces which offers to clear "site settings". This does have the downside that these exceptions can only be cleared via their permissions dialog in about:preferences .... I think it's the more intuitive behaviour though. There isn't really a reason why you'd want to clear the exceptions themselves.

Comment 3

[:Gijs (he/him)]

(In reply to Paul Zühlcke [:pbz] from comment #2)

I'm wondering generally if clear on shutdown site exceptions should never be cleared when going through any data clearing surfaces which offers to clear "site settings". This does have the downside that these exceptions can only be cleared via their permissions dialog in about:preferences .... I think it's the more intuitive behaviour though. There isn't really a reason why you'd want to clear the exceptions themselves.

This description makes sense to me. If we're feeling generous/cautious we can add an about:config pref in case people are somehow depending on this behaviour in terms of not leaving traces on the machine, or something? (But then, why not use permanent private browsing mode...)