Address privacy issue with start_url (#1029)

Author: marcoscaceres

index.html

@@ -818,6 +818,11 @@ <h3>
             time thereafter, a user agent allows the user to inspect and, if
             necessary, modify the <a>start URL</a> of an application.
           </p>
+          <p>
+            Additionally, developers MUST NOT use the <a>start URL</a> to
+            include information that uniquely identifies a user (e.g.,
+            "?user=123" or "/user/123/", or "https://user123.foo.bar").
+          </p>
         </section>
       </section>
       <section>