anotherhale / secure_headers

HTTP security headers for Phoenix/Plug
Apache License 2.0
45 stars 11 forks source link

add support for clear-site-data #3

Closed paralax closed 7 years ago

paralax commented 7 years ago

this PR adds support for the draft "clear-site-data" (CSD) header standard. (noticed in part because of its inclusion in twitter/secureheaders for rails).

this does not include any changes to the default headers, CSD should only be used for logout or similar "please destroy records of our data" type events.