NEW 206742
WKWebsiteDataRecord metadata
https://bugs.webkit.org/show_bug.cgi?id=206742
Summary WKWebsiteDataRecord metadata
Krzysztof Jan Modras [:chrmod]
Reported 2020-01-24 05:37:08 PST
WebsiteData struct could provide more metadata like last accessed time. This, as suggested by Brave team would allow to implement privacy feature that clears Website Data like local storage if it is not being access for some time (2 weeks for example).
Attachments
Maciej Stachowiak
Comment 1 2020-02-19 00:14:41 PST
I'm not sure if we track the last access time for all the storage types. In some cases, the access does not even happen in WebKit, it's in an underlying layer. So this is a challenging request as written. Is access time desirable for WKWebsiteDataTypes or just some? (We could approximate by last visit to the site, but clients that record browsing history could do that themselves.)
Krzysztof Jan Modras [:chrmod]
Comment 2 2020-02-19 01:49:47 PST
Having last accessed time is most important for cookies, localStorage, indexedDB as it would allow developers to implement some parts of ITP. Not sure if HTTP Cache would bring much value. Adding Sam Macbeth to the discussion as he can provide more insight to the actual use cases.
Maciej Stachowiak
Comment 3 2020-02-19 03:07:09 PST
Is the goal here to enable implementation of ITP (in which case we should just expose ITP)? I think ITP decides what to erase based on recency of first party visit and user interaction, not last access time. (Could be wrong on this though).
Joel
Comment 4 2020-02-20 07:12:17 PST
re: pes@brave.com / @pes10k We (Brave) would like the ability to prude / empty site storage programmatically, periodically. For example, we want to implement policies like "delete all local storage values that haven't been read or modified in the last 7 days, for Y origin". Having the ability to read "key name, origin, creation date, last access date" would be sufficient. No need to add capabilities like reading, modifying or inserting these values, since those capabilities could be used for privacy harming purposes (e.g. stuffing 1p cookie jars from the app)
Note You need to log in before you can comment on or make changes to this bug.