313183 - "Clear Private Data" doesn't delete "Javascript Console" warnings and errors, which can contain history information

Status: RESOLVED DUPLICATE of bug 322169

(Firefox :: Bookmarks & History, enhancement)

Description

[NoName]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051006 Firefox/1.4.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051006 Firefox/1.4.1

Though the user clears the "Browsing History" in "Clear Private Data" parts of
the history could be tracked by "Javascript Console" information (errors and
warnings).

Reproducible: Always

Comment 1

[richardtallent]

I'm glad someone filed this before I discovered it today!

Especially considering that CSS issues are shown as "JavaScript errors", almost every web site in the world will throw a few errors into the JavaScript console. Reconstructing a rudimentary browser history from this log is trivial. Clearing of browser history should definitely clear the console.

Related: many web sites use "cookie-less" authentication via a session key in their URIs. If the user selects to clear "Authenticated Sessions" in the Clear Private Data dialog, the JavaScript console should also be cleared to prevent someone from using any embedded authentication keys that might show up in JavaScript error URLs.

Comment 2

[Ryan Flint [:rflint] (ping via IRC for reviews)]

*** This bug has been marked as a duplicate of 322169 ***