From 03fdb00d3e8a927d5c75e66f446c661d50374bf6 Mon Sep 17 00:00:00 2001
From: Reilly Wood <26268125+rgwood@users.noreply.github.com>
Date: Tue, 14 Feb 2023 11:12:00 -0800
Subject: [PATCH] VACUUM after deleting SQLite data (#538)

---
 src/history/sqlite_backed.rs | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/history/sqlite_backed.rs b/src/history/sqlite_backed.rs
index d5c9e3c..5108441 100644
--- a/src/history/sqlite_backed.rs
+++ b/src/history/sqlite_backed.rs
@@ -141,6 +141,12 @@ impl History for SqliteBackedHistory {
             .execute("delete from history", params![])
             .map_err(map_sqlite_err)?;
 
+        // VACUUM to ensure that sensitive data is completely erased
+        // instead of being marked as available for reuse
+        self.db
+            .execute("VACUUM", params![])
+            .map_err(map_sqlite_err)?;
+
         Ok(())
     }