1950318 - Clear-Site-Data: "cache": Only clear non-mAnonymous cache entries.

Status: ASSIGNED

(Toolkit :: Data Sanitization, task, P3)

Description

[Manuel Bucher [:manuel]]

Currently the ClearOrigin cache code clears both mAnonymous = true and mAnonymous = false. However, setting mAnonymous = true can be set only from priviledged code. Therefore, the clear-site-data doesn't need to clear that.

Comment 1

[Manuel Bucher [:manuel]]

Attachment: Bug 1950318 - Only clear mAnonymous cache entries in clearByPrincipal on systemPrincipal

This API is mainly used by Clear-Site-Data: "cache"1 header with content
principals. However, mAnonymous request and therefore cache entries can only
stem from priviledged context.