Deleting quota managed storage deletes all data but leaves traces behind that indicate that a user visited a site. This is a privacy issue as no such traces should exist after using the clear browsing data dialog or deleting all data on chrome://settings/cookies.
Currently chrome://settings/cookies hides entries that don't contain data, so it is not visible that such an issue exists:
https://cs.chromium.org/chromium/src/chrome/browser/browsing_data/browsing_data_quota_helper_impl.cc?l=153
Steps for reproduction:
- remove the following lines from BrowsingDataQuotaHelperImpl::OnGetHostsUsageComplete():
if (info.temporary_usage <= 0 && info.persistent_usage <= 0 && info.syncable_usage <= 0) continue;
- recompile chromium
- visit google.com or yahoo.com
- close these tabs and go to chrome://settings/cookies
- click "remove all"
- reload chrome://settings/cookies
- notice that there are still entries for google.com and yahoo.com
Comment 1 by dullweber@chromium.org
, Jan 9 2017