[w3c/manifest] Recommend user agents let users inspect and modify shortcut URLs (PR #1221)

Shortcut URLs can encode a user-identifying string that, like an identifier in the start URL, is not cleared when the user clears site data. This adds that note for shortcuts and mirrors the existing start_url tracking mitigation by recommending user agents let the user inspect and, if necessary, modify a shortcut's URL. Surfaced while completing the Security and Privacy self-review for CR.

Adds new normative recommendations or optional items.


<!--
    This comment and the below content is programmatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/w3c/manifest/pull/1221.html" title="Last updated on Jul 2, 2026, 1:58 PM UTC (deb6245)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/manifest/1221/d5e2eeb...deb6245.html" title="Last updated on Jul 2, 2026, 1:58 PM UTC (deb6245)">Diff</a>
You can view, comment on, or merge this pull request online at:

  https://github.com/w3c/manifest/pull/1221

-- Commit Summary --

  * Recommend user agents let users inspect and modify shortcut URLs

-- File Changes --

    M index.html (8)

-- Patch Links --

https://github.com/w3c/manifest/pull/1221.patch
https://github.com/w3c/manifest/pull/1221.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/pull/1221
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/manifest/pull/1221@github.com>