Chrome again exempts Google from user site data settings
Chrome again exempts Google from user site data settings
Chrome 再次将 Google 排除在用户站点数据设置之外
Six years ago I published a blog post “Chrome exempts Google sites from user site data settings” that received quite a bit of attention: Michael Tsai, Hacker News, The Register, The Verge, and Gizmodo, among others. The blog post was about a Google Chrome bug that mysteriously exempted Google-owned sites from the setting to automatically delete all site data. Eventually, spurred by my report, Google did fix the bug.
六年前，我发表了一篇题为《Chrome 将 Google 站点排除在用户站点数据设置之外》的博文，引起了不小的关注：Michael Tsai、Hacker News、The Register、The Verge 和 Gizmodo 等媒体均对此进行了报道。那篇博文讲述的是一个 Google Chrome 的漏洞，该漏洞神秘地将 Google 旗下的站点排除在“自动删除所有站点数据”的设置之外。最终，在我的报告推动下，Google 修复了这个漏洞。
You can probably guess why I’m writing about the bug again: I’ve noticed Chrome doing something similar now. I’ve reproduced this new issue on two different Macs with Chrome version 152.0.7977.83. For testing purposes, I changed the default search engine in Chrome from Google to DuckDuckGo, just to make sure that this setting was not the cause.
你大概能猜到我为什么又要写这个漏洞了：我发现 Chrome 现在又出现了类似的情况。我在两台不同的 Mac 上使用 Chrome 152.0.7977.83 版本复现了这个问题。为了测试，我将 Chrome 的默认搜索引擎从 Google 改为了 DuckDuckGo，以确保不是该设置导致的问题。
On-device site data settings (chrome://settings/content/siteData) shows that the Default behavior is to “Delete data sites have saved to your device when you close all windows.” I’m not signed into Chrome and indeed disallow Chrome sign-in. You can see on chrome://settings/content/all that no site data is saved.
设备端站点数据设置（chrome://settings/content/siteData）显示，默认行为是“关闭所有窗口时删除站点保存到您设备的数据”。我没有登录 Chrome，并且确实禁用了 Chrome 登录功能。你可以在 chrome://settings/content/all 中看到，此时没有任何站点数据被保存。
Now I do a Google search. Then I close the one and only window in Chrome. Returning to chrome://settings/content/all, I find some google.com site data! This data persists even if I quit and relaunch Chrome. If I delete the Google site data and repeat the whole process, the same issue occurs again. As far as I can tell, www.google.com is the only site exempted by Chrome.
现在我进行一次 Google 搜索，然后关闭 Chrome 中唯一的窗口。回到 chrome://settings/content/all 后，我发现了一些 google.com 的站点数据！即使我退出并重新启动 Chrome，这些数据依然存在。如果我删除这些 Google 站点数据并重复整个过程，同样的问题再次发生。据我所知，www.google.com 是唯一被 Chrome “豁免”的站点。
Looking inside the ~/Library/Application Support/Google/Chrome/Default folder, it appears that the saved site data consists of Cookies, Local Storage, and Session Storage. I’m not certain when this issue was introduced. My default web browser is Safari, so I don’t use Chrome full-time, though I do use it (and Firefox) frequently for testing.
查看 ~/Library/Application Support/Google/Chrome/Default 文件夹，发现保存的站点数据包括 Cookie、本地存储（Local Storage）和会话存储（Session Storage）。我不确定这个问题是什么时候引入的。我的默认浏览器是 Safari，所以我并不全职使用 Chrome，尽管我确实经常使用它（以及 Firefox）进行测试。
I’m personally inclined to cite Hanlon’s razor here rather than engage in conspiracy theories. Nonetheless, Google has no excuse for incompetence either, especially given the amount of money made by the company (which I’ll always call Google, not Alphabet) and its engineers. They can avoid receiving bad publicity from me by improving their QA. Perhaps some kind of unit tests for this feature? Move slower and don’t break things.
我个人倾向于用“汉隆剃刀”（Hanlon’s razor）来解释，而不是陷入阴谋论。尽管如此，Google 也没有理由表现得如此无能，尤其是考虑到该公司（我永远称其为 Google，而不是 Alphabet）及其工程师赚取了巨额财富。他们可以通过改进质量保证（QA）来避免我给他们带来负面宣传。也许可以为这个功能增加一些单元测试？慢一点，别把东西搞坏了。
I wish the government would move fast and break up the Google Search monopoly. Don’t even get me started about how when you’re not signed in to Google, all Google Search results are now opaque https://www.google.com/goto?url= garbage rather than the site URLs!
我希望政府能迅速行动，拆分 Google 搜索的垄断地位。更别提当你不登录 Google 时，所有的 Google 搜索结果现在都变成了不透明的 https://www.google.com/goto?url= 垃圾链接，而不是原本的站点 URL！