Address privacy issue with start_url (#1029)

marcoscaceres · web-flow · commit 5d2ac4b123d6 · 2022-01-24T17:36:56.000+11:00
diff --git a/index.html b/index.html
@@ -818,6 +818,11 @@ <h3>
             time thereafter, a user agent allows the user to inspect and, if
             necessary, modify the <a>start URL</a> of an application.
           </p>
+          <p>
+            Additionally, developers MUST NOT use the <a>start URL</a> to
+            include information that uniquely identifies a user (e.g.,
+            "?user=123" or "/user/123/", or "https://user123.foo.bar").
+          </p>
         </section>
       </section>
       <section>
