New issue
Advanced search Search tips

Issue 667701 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Nov 2016
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Security



Sign in to add a comment

Incognito does not kill cookies when tabs is closed

Reported by giol...@gmail.com, Nov 22 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36

Steps to reproduce the problem:
1. Open site1 in incognito tab(for example only in one tab) that saves cookies
2. Open something else in second incognito tab
3. Close tab with site1

What is the expected behavior?
I think that after closing all tabs with site1 in incognito window all site1's cookies will be deleted, BUT

What went wrong?
4. Open site1 in incognito tab and we will see that all cookies are safe.

Did this work before? No 

Chrome version: 54.0.2840.99  Channel: stable
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: Shockwave Flash 23.0 r0

For example:
I will open http://crypcode.com/google/security.php this link in incognito tab
screen 1: open new incognito window
sc. 2: open my link, that set cookie if it was not found
sc. 3: open new another tab
sc. 4: close tab with my link
At this step I thing that all cookies from crypcode.com will be deleted because I closed all tabs with this site.
sc. 5: open http://crypcode.com/google/security.php

We see, that cookies was not deleted. 

I this is a real problem because if I has opened something else and I want to destroy all cookies from site crypcode.com(or site1 from example) I have to close incognito window, not all tabs with crypcode.com(or site1 from example)

In attached files you can see security.php file
 
security.php
216 bytes View Download
Status: WontFix (was: Unconfirmed)
Thanks for the report. However, incognito has been designed as a window level concept, so the behaviour you see is by design. From https://www.chromium.org/user-experience/incognito:

Chromium's backend could be made capable of running incognito on a per-tab basis, but we keep the mode at the window level to avoid the confusion of having a tabstrip of mixed-mode tabs.
Project Member

Comment 2 by sheriffbot@chromium.org, Feb 28 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment