Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update spec for cookie partition keys and partitioned storage keys #78

Merged
merged 10 commits into from
Jul 22, 2024
Merged

Update spec for cookie partition keys and partitioned storage keys #78

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
c335591
Specify handling of partitioned cookies in deletion
svendlarsen Jul 8, 2024
f1cdf89
Add refs for paritioned cookies and domain attribute
svendlarsen Jul 9, 2024
dd8ce2d
Correct partition key matching description
svendlarsen Jul 15, 2024
045d4bd
Rename cookie clearing algorithm for clarity
svendlarsen Jul 15, 2024
a73cd0d
Revert "Rename cookie clearing algorithm for clarity"
svendlarsen Jul 16, 2024
b38cf7c
Document host precondition in cookie-clearing algorithm
svendlarsen Jul 16, 2024
0fdc97a
Handle non-site info in cookie partition keys
svendlarsen Jul 18, 2024
bc57bad
Add dfn links for `continue`
svendlarsen Jul 18, 2024
8ceb8ed
Handle partitioned non-cookie storage in deletion
svendlarsen Jul 19, 2024
7fd9126
Drop phantom link to storage key top-level site
svendlarsen Jul 22, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 23 additions & 6 deletions index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,9 +50,14 @@ spec: RFC6265; urlPrefix: https://tools.ietf.org/html/rfc6265/
type: dfn
text: cookie store; url: section-5.3
text: domain-match; url: section-5.1.3
text: domain attribute; url: section-5.2.3
spec: RFC7234; urlPrefix: https://tools.ietf.org/html/rfc7234/
type: dfn
text: network cache; url: section-2
spec: PARTITIONED-COOKIES; urlPrefix: https://datatracker.ietf.org/doc/html/draft-cutler-httpbis-partitioned-cookies#
type: dfn
text: partitioned cookie; url: section-2.1
text: partition key; url: section-2.2
</pre>

<section class="non-normative">
Expand Down Expand Up @@ -755,8 +760,15 @@ spec. It would be nice to unify these in the future.</p>
To <dfn>clear cookies for host</dfn> given a [=host=] |host|, perform the
following steps:

1. Let |cookieList| be the set of cookies from the [=cookie store=] whose
domain attribute is a [=domain-match=] with |host|.
1. [=Assert=]: |host|'s [=host/registrable domain=] is |host| or null.
1. Let |cookieList| be a set of cookies, initially empty.
1. [=list/For each=] cookie |cookie| in the [=cookie store=]:
1. If |cookie| is not [=partitioned cookie|partitioned=]:
1. If |cookie|'s [=domain attribute=] is a [=domain-match=] with |host|, add |cookie| to |cookieList|; otherwise, [=iteration/continue=].
1. If |cookie| is [=partitioned cookie|partitioned=]:
1. If the top-level [=site=] in |cookie|'s [=partition key=] is [=same site=] with the [=site=] ("http", |host|), add |cookie| to |cookieList|.
1. If the top-level [=site=] in |cookie|'s [=partition key=] is [=same site=] with the [=site=] ("https", |host|), add |cookie| to |cookieList|.
1. Otherwise, [=iteration/continue=].
1. [=list/For each=] |cookie| in |cookieList|:
1. Remove |cookie| from the [=cookie store=].

Expand All @@ -772,13 +784,18 @@ the following steps:
1. For each <a spec=storage>storage shed</a> |shed| held by the user agent or a
[=traversable navigable=]:
1. [=map/For each=] |storageKey| -> |storageShelf| of |shed|:
1. If |storageKey|'s <a spec=storage for="storage key">origin</a> is an
[=opaque origin=], then [=iteration/continue=].
1. If |storageKey|'s <a spec=storage for="storage key">origin</a>'s
[=origin/host=] does not equal |host|, then [=iteration/continue=].
1. Let |topLevelSite| be |storageKey|'s top-level site.
1. If |topLevelSite| is an [=opaque origin=], then [=iteration/continue=].
1. If |topLevelSite|'s [=host=] does not equal |host|, then [=iteration/continue=].
1. Delete all data stored in |storageShelf|.
1. [=map/Remove=] |storageKey| from |shed|.

Note: This algorithm is written assuming the implementation of the
[work-in-progress update](https://github.com/whatwg/storage/pull/144) to
the [Storage Standard](https://storage.spec.whatwg.org/) to
<a spec=storage lt="storage key">key</a> storage on both an
<a spec=storage for="storage key">origin</a> and a top-level site.

</div>

<div algorithm>
Expand Down
Loading