Header Security
Clear-Site-Data Header Check
The Clear-Site-Data header allows you to delete browsing data after logout. Learn how to configure it to protect user information.
What this test checks
This test checks for the presence of the Clear-Site-Data header. This header allows you to delete browsing data (cookies, cache, localStorage) after logout, protecting user sensitive information from subsequent access.
Our recommendation
Add the Clear-Site-Data header in logout responses with directives 'cache', 'cookies', 'storage' to clear data. Test your configuration to verify that data is effectively cleared after logout.
Security tests
Read more
Sensitive Files