Bug#782659: iceweasel: cookie exceptions retained in private mode

[tim schmidt]

Package: iceweasel
Version: 31.6.0esr-1
Severity: normal

Dear Maintainer,

I use the following custom settings for history:

always use private browsing mode
accept cookies from sites
accept 3rd party cookies: never

I noticed that in the exceptions area on the privacy tab it keeps a list of exceptions and this list is
retained after restarting the browser or even the computer. As this keeps a tally of where I've been,
I believe this to be a privacy concern, as private browsing mode is supposed to leave no trace of activity 
on one's PC. This list can be manually deleted, however many people may be unaware of its existence and 
having to manually delete information defeats the purpose of private mode.  






-- Package-specific info:

-- Extensions information
Name: Adblock Plus
Location: ${PROFILE_EXTENSIONS}/{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Status: enabled

Name: CanvasBlocker
Location: ${PROFILE_EXTENSIONS}/CanvasBlocker at kkapsner.de.xpi
Status: user-disabled

Name: Default theme
Location: /usr/lib/iceweasel/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

Name: Disconnect
Location: ${PROFILE_EXTENSIONS}/2.0 at disconnect.me.xpi
Status: enabled

Name: Firebug
Location: ${PROFILE_EXTENSIONS}/firebug at software.joehewitt.com.xpi
Status: user-disabled

Name: Ghostery
Location: ${PROFILE_EXTENSIONS}/firefox at ghostery.com.xpi
Status: user-disabled

Name: Greasemonkey
Location: ${PROFILE_EXTENSIONS}/{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Status: user-disabled

Name: HTTPS-Everywhere
Location: ${PROFILE_EXTENSIONS}/https-everywhere at eff.org
Status: enabled

Name: Privacy Badger Firefox
Location: ${PROFILE_EXTENSIONS}/jid1-MnnxcxisBPnSXQ at jetpack.xpi
Status: enabled

Name: SSL Version Control
Location: ${PROFILE_EXTENSIONS}/jid1-ZM3BerwS6FsQAg at jetpack.xpi
Status: enabled

Name: User Agent Switcher
Location: ${PROFILE_EXTENSIONS}/{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi
Status: user-disabled

Name: Video WithOut Flash
Location: ${PROFILE_EXTENSIONS}/vwof at drev.com.xpi
Status: enabled

-- Plugins information
Name: Shockwave Flash
Location: /usr/lib/gnash/libgnashplugin.so
Package: browser-plugin-gnash
Status: disabled

Name: Skype Buttons for Kopete
Location: /usr/lib/mozilla/plugins/skypebuttons.so
Package: kopete
Status: disabled

Name: VLC Web Plugin
Location: /usr/lib/mozilla/plugins/libvlcplugin.so
Package: browser-plugin-vlc
Status: enabled


-- Addons package information
ii  browser-plugin 0.8.11~git20 amd64        GNU Shockwave Flash (SWF) player 
ii  browser-plugin 2.0.6-4      amd64        multimedia plugin for web browser
ii  iceweasel      31.6.0esr-1  amd64        Web browser based on Firefox
ii  kopete         4:4.14.1-2   amd64        instant messaging and chat applic

-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages iceweasel depends on:
ii  debianutils               4.4+b1
ii  fontconfig                2.11.0-6.3
ii  libasound2                1.0.28-1
ii  libatk1.0-0               2.14.0-1
ii  libc6                     2.19-17
ii  libcairo2                 1.14.0-2.1
ii  libdbus-1-3               1.8.16-1
ii  libdbus-glib-1-2          0.102-1
ii  libevent-2.0-5            2.0.21-stable-2
ii  libffi6                   3.1-2+b2
ii  libfontconfig1            2.11.0-6.3
ii  libfreetype6              2.5.2-3
ii  libgcc1                   1:4.9.2-10
ii  libgdk-pixbuf2.0-0        2.31.1-2+b1
ii  libglib2.0-0              2.42.1-1
ii  libgtk2.0-0               2.24.25-3
ii  libhunspell-1.3-0         1.3.3-3
ii  libnspr4                  2:4.10.7-1
ii  libnss3                   2:3.17.2-1.1
ii  libpango-1.0-0            1.36.8-3
ii  libsqlite3-0              3.8.7.1-1
ii  libstartup-notification0  0.12-4
ii  libstdc++6                4.9.2-10
ii  libvpx1                   1.3.0-3
ii  libx11-6                  2:1.6.2-3
ii  libxext6                  2:1.3.3-1
ii  libxrender1               1:0.9.8-1+b1
ii  libxt6                    1:1.1.4-1+b1
ii  procps                    2:3.3.9-9
ii  zlib1g                    1:1.2.8.dfsg-2+b1

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
pn  fonts-mathjax          <none>
pn  fonts-oflb-asana-math  <none>
ii  fonts-stix [otf-stix]  1.1.1-1
ii  libcanberra0           0.30-2.1
ii  libgnomeui-0           2.24.5-3
ii  libgssapi-krb5-2       1.12.1+dfsg-19
pn  mozplugger             <none>

-- no debconf information