Tweaked 2.1 'Disk Avoidance' section authored by Richard Pospesel's avatar Richard Pospesel
......@@ -124,8 +124,8 @@ Violations in these properties typically result in serious risk for the user in
3. [Disk Avoidance](#43-disk-avoidance)
The browser MUST NOT write any information that is derived from or that reveals browsing activity to the disk, or store it in memory beyond the duration of one browsing session, unless the user has explicitly opted to store their browsing history information to disk.
Built-in extensions also MUST follow these requirements.
By default, the browser and any built-in extensions MUST NOT write any information that is derived from or that reveals browsing activity to the disk, or store it in memory beyond the duration of one browsing session.
This requirement MAY be ignored if the user has explicitly opted to store their browsing history information to disk.
4. [Least Privilege](#44-least-privilege)
......
......