[tor-bugs] #22414 [Applications/Tor Browser]: Object URLs are not revoked, even after New Identity

[Tor Bug Tracker & Wiki]

#22414: Object URLs are not revoked, even after New Identity
------------------------------------------+------------------------
     Reporter:  cypherpunks               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  High                      |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Major                     |   Keywords:  tbb-newnym
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+------------------------
 In #15502 this problem is completely described, but applied measures don't
 solve it.
 The docs say "Browsers will release these automatically when the document
 is unloaded". So, either document is never unloaded, or Mozilla forgot to
 implement this.
 Testcase is also in #15502 (creates blobs even when JS is disabled).
 Leftovers are visible in `about:memory`:
 {{{
 35 (100.0%) -- dom-media-stream-urls
 ├──22 (62.86%) -- owner unknown
 │  ├───1 (02.86%) ── blob:null/25779196-2491-42e5-8f69-4e52ac6ceb65
 │  ...
 ├───8 (22.86%) -- owner(resource://pdf.js/build/pdf.worker.js)
 │   ├──1 (02.86%) ──
 blob:resource://pdf.js/1ef14a0f-a417-47cb-9955-8b9f18a43e2c
 │   ...
 └───1 (02.86%) ──
 owner(https://people.torproject.org/~mikeperry/transient/tests/blob-uri-
 creation.html)/blob:https://people.torproject.org/e66522b9-85ea-4743-a773-aab2deb7bdc5
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22414>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online