Andrea Marchesini [:baku] Assignee
	Description • 6 years ago

This new feature is disabled by a pref: dom.clearSiteData.enabled.

	Andrea Marchesini [:baku] Assignee
	Comment 1 • 6 years ago

I'm going to land the last remaining dependence today.
I'm also going to send a Intent to Ship email.

	Christoph Kerschbaumer [:ckerschb]
	Comment 2 • 6 years ago

Comment on attachment 8993589 [details] [diff] [review]
clearSiteData.patch

Review of attachment 8993589 [details] [diff] [review]:
-----------------------------------------------------------------

ship it :-)
thanks, r=me

	Pulsebot
	Comment 3 • 6 years ago

Pushed by amarchesini@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/62fd708ed9d9
Enable Clear-Site-Data header by default, r=ckerschb

	Andrea Marchesini [:baku] Assignee
	Comment 4 • 6 years ago

[Why is this notable]: From the spec: "Developers may instruct a user agent to clear various types of relevant data by delivering a Clear-Site-Data HTTP response header in response to a request.". This is a powerful feature to expose and to describe to users. We are planning to write a blog post about it.
[Affects Firefox for Android]: supported
[Links (documentation, blog post, etc)]: https://w3c.github.io/webappsec-clear-site-data/

	Cosmin Sabou [:CosminS]
	Comment 5 • 6 years ago
bugherder

https://hg.mozilla.org/mozilla-central/rev/62fd708ed9d9

	Pascal Chevrel:pascalc (PTO until April 26)
	Comment 6 • 6 years ago

(In reply to Andrea Marchesini [:baku] from comment #4)
> [Why is this notable]: From the spec: "Developers may instruct a user agent
> to clear various types of relevant data by delivering a Clear-Site-Data HTTP
> response header in response to a request.". This is a powerful feature to
> expose and to describe to users. We are planning to write a blog post about
> it.
> [Affects Firefox for Android]: supported
> [Links (documentation, blog post, etc)]:
> https://w3c.github.io/webappsec-clear-site-data/

Andrea, am I understanding correctly that this is a feature targeting Web developers only? 

Usually our release notes target mostly our end-users and we have a link on these release notes to an MDN page which lists all the devtools and platform changes that target developers (will be https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/63).

Did you mean to have this feature listed there or did you mean to have it listed in our general release notes (like https://www.mozilla.org/en-US/firefox/61.0a1/releasenotes)? If the former then the dev-doc-needed keyword is enough.

Thanks

	Andrea Marchesini [:baku] Assignee
	Comment 7 • 6 years ago

> Usually our release notes target mostly our end-users and we have a link on
> these release notes to an MDN page which lists all the devtools and platform
> changes that target developers (will be
> https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/63).

I would like to have Clear-Site-Data listed here, yes.
This feature is something new that will be probably used by websites to have a better control of cache and storage data.
For give an example, gmail.com seems to use feature. It's important to communicate that firefox supports this feature since 63.
Unfortunately it's not an API. Maybe we should add this in 'security' or 'other' section.
Let's see what ckerschb says about it.

	Christoph Kerschbaumer [:ckerschb]
	Comment 8 • 6 years ago

(In reply to Andrea Marchesini [:baku] from comment #7)
> > Usually our release notes target mostly our end-users and we have a link on
> > these release notes to an MDN page which lists all the devtools and platform
> > changes that target developers (will be
> > https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/63).
> 
> I would like to have Clear-Site-Data listed here, yes.
> This feature is something new that will be probably used by websites to have
> a better control of cache and storage data.
> For give an example, gmail.com seems to use feature. It's important to
> communicate that firefox supports this feature since 63.
> Unfortunately it's not an API. Maybe we should add this in 'security' or
> 'other' section.
> Let's see what ckerschb says about it.

Yeah, I guess we should add it to the section 'Security' where we usually post updates regarding CSP, Mixed Content Blocking, or most recently the changes regarding the referrer policy (even though that was in the 'HTTP' section I just found out :-))

see: https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/62

	Pascal Chevrel:pascalc (PTO until April 26)
	Comment 9 • 6 years ago

Removing the relnote request as this will go on the MDN release page.

	Florian Scholz (Open Web Docs)
	Comment 10 • 6 years ago

Updated: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Clear-Site-Data
Added to: https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/63#HTTP