{"action":"opened","issue":{"url":"https://api.github.com/repos/gorhill/uMatrix/issues/350","labels_url":"https://api.github.com/repos/gorhill/uMatrix/issues/350/labels{/name}","comments_url":"https://api.github.com/repos/gorhill/uMatrix/issues/350/comments","events_url":"https://api.github.com/repos/gorhill/uMatrix/issues/350/events","html_url":"https://github.com/gorhill/uMatrix/issues/350","id":105994607,"number":350,"title":"Private mode data leakage in firefox","user":{"login":"ancipital","id":14234157,"avatar_url":"https://avatars.githubusercontent.com/u/14234157?v=3","gravatar_id":"","url":"https://api.github.com/users/ancipital","html_url":"https://github.com/ancipital","followers_url":"https://api.github.com/users/ancipital/followers","following_url":"https://api.github.com/users/ancipital/following{/other_user}","gists_url":"https://api.github.com/users/ancipital/gists{/gist_id}","starred_url":"https://api.github.com/users/ancipital/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ancipital/subscriptions","organizations_url":"https://api.github.com/users/ancipital/orgs","repos_url":"https://api.github.com/users/ancipital/repos","events_url":"https://api.github.com/users/ancipital/events{/privacy}","received_events_url":"https://api.github.com/users/ancipital/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-09-11T11:46:34Z","updated_at":"2015-09-11T11:46:34Z","closed_at":null,"body":"Steps to reproduce:\r\n\r\nOpen a private browsing window. Set some temporary permissions within any scope to make the site work. Close the private browsing window, if you wish.\r\n\r\nActual results:\r\n\r\nThe temporary permissions needed to make the site work remained visible within the rules list of umatrix's dashboard, when viewed from the normal (non-private) window. These included items like the domain name, leaving quite a large trail.\r\n\r\nExpected results:\r\n\r\nThe temporary rules from the private browsing instance should not be viewable outside of the private browsing instance- and should be automatically destroyed when the user exits private browsing.\r\n\r\nThis may well be a umatrix rather than firefox bug- I don't know whether the way that the addon shares data between private and non-private browsing is normal. Either way, addons not being sandboxed/invoked separately between modes may lead to further problems of this type in future.\r\n\r\n(Also filed as https://bugzilla.mozilla.org/show_bug.cgi?id=1203923 for consideration of firefox devs)\r\n"}}