Security: Recently Closed Tabs are not being removed when browser history is cleared
Reported by
btspe...@gmail.com,
Dec 11 2017
|
|||||||
Issue descriptionThis template is ONLY for reporting security bugs. If you are reporting a Download Protection Bypass bug, please use the "Security - Download Protection" template. For all other reports, please use a different template. Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com /chromium/src/+/master/docs/security/faq.md Please see the following link for instructions on filing security bugs: https://www.chromium.org/Home/chromium-security/reporting-security-bugs NOTE: Security bugs are normally made public once a fix has been widely deployed. VULNERABILITY DETAILS Recently closed tabs are not clearing when clearing all browsing history is selected VERSION Chrome Version: Version 62.0.3202.94 (Official Build) (64-bit) Operating System: MacOS 10.12.6 REPRODUCTION CASE Open 3 tabs, google.com, att.com and cnn.com. Look at the browser history. Clear the history. Now shutdown chrome. Reopen chrome and look at the history tab. All the browser history is removed but the recently closed tabs has not been cleared and shows the last opened tabs.
,
Dec 12 2017
We are currently working on deleting entries from session history, so you can't go back to previously visited sites after history is deleted. This will not fix this issue as it is about pages that are still open. We are also thinking about adding a new checkbox to Clear Browsing Data to close all tabs. That would fix this issue but requires an additional choice when deleting data. For now the correct way to clear history is to first close sensitive tabs and then delete history. The recent tabs menu is cleared when history is deleted from Clear Browsing Data. The recent tabs entries you are seeing were created when closing Chrome, which is after you deleted history. Alternatively we suggest to use incognito if you want all history to be deleted when closing Chrome. I will leave this bug open as the other bug is mostly about cleaning up session history.
,
May 30 2018
,
Jan 11
Setting defect without priority to Pri-2. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by elawrence@chromium.org
, Dec 11 2017Components: UI>Browser>History Privacy
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Owner: dullweber@chromium.org
Status: Assigned (was: Unconfirmed)
This may be more properly a duplicate of Issue 407074, but leaving to you to decide and ensure that this particular variant ("Recently closed tabs") is addressed in whatever work we do for that issue.