Web Application Manifest
- +More details about this document
-
@@ -1528,18 +1528,29 @@
Web Application Manifest
This can be useful for analytics and possibly other customizations. However, it is also conceivable that developers could encode strings into the start_url that uniquely identify the user (e.g., a - server assigned UUID). This is fingerprinting/privacy - sensitive information that the user might not be aware of. + server-assigned identifier, such as"?user=123",
+ "/user/123/", or "https://user123.foo.bar"). This is
+ fingerprinting/privacy sensitive information that the user might
+ not be aware of.
+ + It is bad practice for a developer to use the start URL + to include information that uniquely identifies a user, as it would + represent a fingerprint that is not cleared when the user clears + site data. However, nothing in this specification can practically + prevent developers from doing this. +
Given the above, it is RECOMMENDED that, upon installation, or any time thereafter, a user agent allows the user to inspect and, if - necessary, modify the start URL of an application. + necessary, modify the start URL of an application.
- Additionally, developers MUST NOT use the start URL to include - information that uniquely identifies a user (e.g., "?user=123" or - "/user/123/", or "https://user123.foo.bar"). + A user agent MAY offer other protections against this form of + fingerprinting. For example, if a user clears data from an origin, + the user agent MAY offer to uninstall applications that are + within scope of that origin, thus removing the + potential fingerprint from the application's start URL.
@@ -1608,11 +1619,11 @@Web Application Manifest
application's manifest, and not a distinct application, even if it is served from a different URL than the one seen previously. -+
The identity can be used by a service that collects lists of web applications to uniquely identify applications.
+
The identity is processed like a URL but it doesn't point to a resource that can be navigated to, so it's not required to be within scope. @@ -1839,7 +1850,7 @@
Web Application Manifest
Implementors MAY override the value defined by thetheme_color member to support prefers-color-scheme.
- +
When processing a manifest, the process a color member
algorithm is used to process the theme_color member.
Web Application Manifest
Implementors MAY override the value defined by thebackground_color member to support prefers-color-scheme.
- +
When processing a manifest, the process a color member
algorithm is used to process background_color member.