#31425: Support for Clear-Site-Data header.
-------------------------------+-----------------------------------------
Reporter: Mads Jensen | Owner: nobody
Type: New feature | Status: new
Component: HTTP handling | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Someday/Maybe
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------+-----------------------------------------
Changes (by felixxm):
* stage: Unreviewed => Someday/Maybe
Old description:
> There's a new header described at https://github.com/w3c/webappsec-clear-
> site-data that can be used to enforce the browser to remove various types
> of data that the user leaves behind. A usage example is to clear data on
> either an account deletion, or simply when signing out. Examples are the
> cache and the cookies. The document is still a working draft.
>
> Some time ago, support for the cookie SameSite flag was implemented.
>
> It appears that the major browser vendors have implemented support for
> it, to some extend.
> https://developer.mozilla.org/enUS/docs/Web/HTTP/Headers/Clear-Site-Data
New description:
There's a new header described at https://github.com/w3c/webappsec-clear-
site-data that can be used to enforce the browser to remove various types
of data that the user leaves behind. A usage example is to clear data on
either an account deletion, or simply when signing out. Examples are the
cache and the cookies. The document is still a working draft.
Some time ago, support for the cookie SameSite flag was implemented.
It appears that the major browser vendors have implemented support for it,
to some extend. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers
/Clear-Site-Data
--
Comment:
Marking as "Someday/Maybe" because specification is still a draft and may
change at any moment.
--
Ticket URL: <https://code.djangoproject.com/ticket/31425#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/068.dd38bc23fe71e3dcb0a7c58c84c42b96%40djangoproject.com.
