[tbb-bugs] #26879 [Applications/Tor Browser]: Disk leak on macOS due to Notification API

[Tor Bug Tracker & Wiki]

#26879: Disk leak on macOS due to Notification API
------------------------------------------+---------------------------
     Reporter:  gk                        |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb-disk-leak
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+---------------------------
 Konark Modi reported a while ago a disk leak at least on macOS due to the
 Notification API. Here is the bug report:
 {{{
 The leak is cause by: https://www.w3.org/TR/notifications/ API.

 Steps to reproduce:
 1. Visit http://www.bennish.net/web-notifications.html
 2. Temporarily allow JS.
 3. Click on Authorize button.
 4. Click on Show button.
 5. Notification should occur.


 macOS by default saves these notification
 in`/private/var/folders/qs/54swlb5d1fx4hq969vdqg4rr0000gn/0/com.apple.notificationcenter/db`
 . It dumps the content of the notification and the website name.

 This location can be found using:
 Activity Monitor -> Search for process user noted -> Open files and ports
 -> Notifications DB.

 Now, although the user opted in to these notifications, but this is an
 intended leak from OS level.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26879>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online