Intent to implement: Clear-Site-Data header

[Andrea Marchesini]

Summary: The Clear-Site-Data header allows a secure origin to send a header
requesting the deletion of its own browsing data.

Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1268889


Link to standard: https://w3c.github.io/webappsec-clear-site-data/


Platform coverage: all

Estimated or target release: FF63

Preference behind which this will be implemented:
dom.clearSiteData.enabled

Do other browser engines implement this?
Shipped in Chrome 61.

web-platform-tests:
https://github.com/web-platform-tests/wpt/tree/master/clear-site-data


Secure contexts: Yes.

[smaug]

On 06/20/2018 04:14 PM, Andrea Marchesini wrote:
> Summary: The Clear-Site-Data header allows a secure origin to send a header
> requesting the deletion of its own browsing data.
>
> Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1268889
>
>
> Link to standard: https://w3c.github.io/webappsec-clear-site-data/
>
>
> Platform coverage: all
>
> Estimated or target release: FF63
>
> Preference behind which this will be implemented:
> dom.clearSiteData.enabled
>
> Do other browser engines implement this?
> Shipped in Chrome 61.

It shipped when there are rather major open spec issues...
Ok, that is the Blink model for development, but we really should
figure out how to convince them to get specs into a reasonable state before they ship.



-Olli

[Boris Zbarsky]

On 6/20/18 9:14 AM, Andrea Marchesini wrote:
> Do other browser engines implement this?
> Shipped in Chrome 61.

It looks like there is no test coverage for various parts of this spec
(e.g. the "clear-site-data-reload-needed" case)... We should probably
push to get that fixed.

-Boris

[Andrea Marchesini]

Right, I saw bug 1479519. I'm going to implement some WPTs to cover that
part of the spec.

> _______________________________________________
> dev-platform mailing list
> dev-pl...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-platform
>