A tiny WordPress plugin to clear all browser data related to the site upon logout (With Clear-Site-Data header).
| Author: | Ayesh Karunaratne (profile at wordpress.org) |
| WordPress version required: | 5.1 |
| WordPress version tested: | 6.3 |
| Plugin version: | 1.4 |
| Added to WordPress repository: | 25-01-2020 |
| Last updated: | 23-07-2023
Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
|
| Rating, %: | 0 |
| Rated by: | 0 |
| Plugin URI: | https://wordpress.org/plugins/clear-logout/ |
| Total downloads: | 3 545 |
| Active installs: | 90+ |
 Click to start download |
|
This plugin ensures that when users of your website (including site administrators), the browsers are instructed to clear all residue such as cookies and caches to enhance the security.
Clear-Site-Data HTTP header is sent when a user logs out, which supported browsers will react by removing all existing cookies, cache, and other storage. It will not remove saved passwords, permissions, adblocker rules, and other data that are supposed to be permanent.
This plugin prevents possible security vulnerabilities such as clicking the “Back” button in the browser after logging out revealing the pages that should not have been accessible after logging out. Furthermore, this cleans the browser cache, which prevents accessing authenticated media assets (such as purchased images) from the browser cache of a victim.
FAQ
ChangeLog