I have started to use Tor Browser with bookmarks for the first time and was alarmed to note that by default stored bookmarks are suggested when I enter text into the Address Bar. In fact Tor Browser’s default Address Bar suggestion settings are as follows (15.0.2, Linux):
I do not use Tor Browser in an environment where ‘shoulder surfing’ is a problem. However, in the interests of those who do, I would suggest that all Address Bar suggestions should be opt-in only - i.e. unchecked by default. With this default a casual observer cannot learn the content of a user’s bookmarks, current session’s browsing history etc. If users wish to add Address Bar suggestions, they are of course free to do so.