Skip to content

Commit

Permalink
Update the Service Worker Security FAQ.
Browse files Browse the repository at this point in the history
Clear Site Data has shipped.

Bug: None
Change-Id: If6a15404905a8086fc195ceb1cb2ec6a66a95909
Reviewed-on: https://chromium-review.googlesource.com/c/1292250
Reviewed-by: Robert Sesek <rsesek@chromium.org>
Commit-Queue: Chris Palmer <palmer@chromium.org>
Cr-Commit-Position: refs/heads/master@{#601297}
  • Loading branch information
Chris Palmer authored and Commit Bot committed Oct 19, 2018
1 parent 9604fdc commit f4d4b96
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions docs/security/service-worker-security-faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -171,8 +171,8 @@ vulnerability by setting lower TTLs on SW scripts. We also encourage developers
to [build a kill-switch
SW](https://stackoverflow.com/questions/33986976/how-can-i-remove-a-buggy-service-worker-or-implement-a-kill-switch/38980776#38980776).

In the near future, the right cleanup strategy (for this and other issues) will
be [Clear-Site-Data](https://www.w3.org/TR/clear-site-data/).
The right cleanup strategy (for this and other issues) is
[Clear-Site-Data](https://www.w3.org/TR/clear-site-data/).

Additionally, site operators should ignore (e.g. respond with `400 Bad Request`)
requests that have the Service-Worker request header for domains or paths that
Expand Down Expand Up @@ -271,8 +271,7 @@ experts to participate in those open fora.
## What are some SW best practices for site operators?

* [Build a kill-switch SW](https://stackoverflow.com/questions/33986976/how-can-i-remove-a-buggy-service-worker-or-implement-a-kill-switch/38980776#38980776).
* Use [Clear-Site-Data](https://www.w3.org/TR/clear-site-data/) when it
becomes available.
* Use [Clear-Site-Data](https://www.w3.org/TR/clear-site-data/).
* Be aware of the need for longer session lifetimes, since clients may go
offline and SWs might need to POST cached requests after coming back
online. [Here is one way to handle
Expand Down

0 comments on commit f4d4b96

Please sign in to comment.