Skip to content

Commit

Permalink
Add Clear-Site-Data note (#157)
Browse files Browse the repository at this point in the history
  • Loading branch information
arichiv authored Jul 14, 2023
1 parent c9d66e8 commit 404398c
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,9 @@ spec: HTML; urlPrefix: https://html.spec.whatwg.org/multipage/
spec: STRUCTURED-FIELDS; urlPrefix: https://www.rfc-editor.org/rfc/rfc8941.html#name-
type: dfn
text: sf-lists; url: lists
spec: clear-site-data; urlPrefix: https://w3c.github.io/webappsec-clear-site-data/#
type: dfn
text: Clear-Site-Data Header; url: header
</pre>

<pre class=biblio>
Expand Down Expand Up @@ -144,6 +147,8 @@ The Accept-CH cache can effectively act as an alternative cookie store,
since sites can use each of the hints as a bit set on the client, and that information will be
communicated to them on every request. As such, a user agent MUST evict that
cache whenever the user clears their cookies or when session cookies expire.
A user agent also MUST clear the Accept-CH according to the rules of the
[=Clear-Site-Data Header=].

A site can clear the browser's `Accept-CH` cache for its origin by sending an empty `Accept-CH` header in a response. This sets the origin's [=/client hints set=] to an empty set.

Expand Down

0 comments on commit 404398c

Please sign in to comment.