This repository has been archived by the owner on Dec 11, 2019. It is now read-only.
noscript and flash site settings should not be shared from private browsing into regular browsing #3835
Comments
|
can this move to 0.12.3? |
|
moved |
|
related: #3998 |
diracdeltas
added a commit
that referenced
this issue
Sep 30, 2016
Also address #3835 by not allowing Flash to be allowed persistently. Auditors: @sririambv Test Plan: 1. open http://homestarrunner.com/ in a private tab 2. right click to allow Flash once 3. flash should be allowed 4. close the private tab 5. open a regular tab and open http://homestarrunner.com/. flash should be blocked.
|
also related: #2745 this turns out to be tricky because js/state/contentSettings.js has no awareness of incognito vs regular context. an acceptable solution for now is just for Flash/NoScript settings in private browsing mode to be restricted to 'Allow Once'. |
This was referenced Oct 4, 2016
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
following up on #3795 (comment)
The text was updated successfully, but these errors were encountered: