Permissions in nsIPermissionManager aren't cleared with TorButton's "New Identity"
When TorButton's "New Identity" button is pressed, the permissions stored with
nsIPermissionManager aren't cleared, even though
nsIPermissionManager.removeAll() is called.
torbutton_log(3, "New Identity: Clearing permissions"); let pm = Cc["@mozilla.org/permissionmanager;1"]. getService(Ci.nsIPermissionManager); pm.removeAll(); torbutton_log(3, "New Identity: Sending NEWNYM");
There's a ton of info stored in this thing, including how many time the site has been visited, if popups are allowed, if a site can access offline storage, etc. For me, several dozen sites are listed after clicking "New Identity". It seems to have been keeping these permissions for quite a while, as some of my sites are reported to have hundreds of visits.
To reproduce, do some stuff in TorBrowser for a while, then click "TorButton > New Identity", then navigate to