#31425: Support for Clear-Site-Data header
-----------------------------------------+------------------------
Reporter: Mads Jensen | Owner: nobody
Type: New feature | Status: new
Component: HTTP handling | Version: master
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-----------------------------------------+------------------------
There's a new header described at https://github.com/w3c/webappsec-clear-
site-data that can be used to enforce the browser to remove various types
of data that the user leaves behind. A usage example is to clear data on
either an account deletion, or simply when signing out. Examples are the
cache and the cookies. The document is still a working draft.
Some time ago, support for the cookie SameSite flag was implemented.
It appears that the major browser vendors have implemented support for it,
to some extend. https://developer.mozilla.org/enUS/docs/Web/HTTP/Headers
/Clear-Site-Data
--
Ticket URL: <https://code.djangoproject.com/ticket/31425>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/053.58dea78d2dcb638854fbd1e3fc7aa071%40djangoproject.com.
