#31425: Support for Clear-Site-Data header.
-------------------------------+-----------------------------------------
Reporter: Mads Jensen | Owner: nobody
Type: New feature | Status: new
Component: HTTP handling | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Someday/Maybe
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------+-----------------------------------------
Changes (by felixxm):
* stage: Unreviewed => Someday/Maybe
Old description:
> There's a new header described at https://github.com/w3c/webappsec-clear-
> site-data that can be used to enforce the browser to remove various types
> of data that the user leaves behind. A usage example is to clear data on
> either an account deletion, or simply when signing out. Examples are the
> cache and the cookies. The document is still a working draft.
>
> Some time ago, support for the cookie SameSite flag was implemented.
>
> It appears that the major browser vendors have implemented support for
> it, to some extend.
> https://developer.mozilla.org/enUS/docs/Web/HTTP/Headers/Clear-Site-Data
New description:
There's a new header described at https://github.com/w3c/webappsec-clear-
site-data that can be used to enforce the browser to remove various types
of data that the user leaves behind. A usage example is to clear data on
either an account deletion, or simply when signing out. Examples are the
cache and the cookies. The document is still a working draft.
Some time ago, support for the cookie SameSite flag was implemented.
It appears that the major browser vendors have implemented support for it,
to some extend. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers
/Clear-Site-Data
--
Comment:
Marking as "Someday/Maybe" because specification is still a draft and may
change at any moment.
--
Ticket URL: <https://code.djangoproject.com/ticket/31425#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/068.dd38bc23fe71e3dcb0a7c58c84c42b96%40djangoproject.com.
