fix: prevent blocksClipboard persistence for anonymous users #7730
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR fixes an issue where Volto was creating localStorage entries even for anonymous users.
The problem comes from the blocksClipboard reducer being configured as persistent. Even though anonymous users can’t copy or paste blocks, Volto would still create an empty localStorage entry, which isn’t really needed and can be a concern from a privacy (GDPR) point of view.
With this change, Redux state is only saved to localStorage after a user is logged in. For anonymous visitors, nothing is stored.
This PR fixes the issue by:
We only act when the user has a valid session (userSession.token).
The clipboard and other persistent data are stored in the browser only when someone is logged in; anonymous visitors are skipped.
Anonymous users no longer get empty localStorage entries, improving privacy and GDPR compliance, while editors’ behavior stays the same.
If your pull request closes an open issue, include the exact text below, immediately followed by the issue number. When your pull request gets merged, then that issue will close automatically.
Closes #6997