@mcp-b/chrome-devtools-mcp 2.2.0 → 2.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -4
- package/build/src/DevToolsConnectionAdapter.js +5 -4
- package/build/src/DevtoolsUtils.js +8 -12
- package/build/src/McpContext.js +34 -39
- package/build/src/McpResponse.js +19 -45
- package/build/src/PageCollector.js +10 -11
- package/build/src/WaitForHelper.js +7 -11
- package/build/src/bin/chrome-devtools-cli-options.js +616 -665
- package/build/src/bin/chrome-devtools-mcp-cli-options.js +5 -5
- package/build/src/bin/chrome-devtools.js +2 -24
- package/build/src/bin/cliDefinitions.js +615 -0
- package/build/src/browser.js +5 -10
- package/build/src/daemon/client.js +10 -34
- package/build/src/formatters/{consoleFormatter.js → ConsoleFormatter.js} +10 -17
- package/build/src/formatters/{networkFormatter.js → NetworkFormatter.js} +3 -6
- package/build/src/formatters/{snapshotFormatter.js → SnapshotFormatter.js} +3 -6
- package/build/src/index.js +6 -16
- package/build/src/tools/ToolDefinition.js +1 -1
- package/build/src/tools/emulation.js +1 -1
- package/build/src/tools/input.js +5 -11
- package/build/src/tools/pages.js +7 -19
- package/build/src/tools/performance.js +3 -3
- package/build/src/tools/script.js +4 -6
- package/build/src/tools/tools.js +0 -1
- package/build/src/version.js +1 -1
- package/package.json +9 -9
- package/build/src/third_party/issue-descriptions/CoepCoopSandboxedIframeCannotNavigateToCoopPage.md +0 -4
- package/build/src/third_party/issue-descriptions/CoepCorpNotSameOrigin.md +0 -8
- package/build/src/third_party/issue-descriptions/CoepCorpNotSameOriginAfterDefaultedToSameOriginByCoep.md +0 -18
- package/build/src/third_party/issue-descriptions/CoepCorpNotSameSite.md +0 -7
- package/build/src/third_party/issue-descriptions/CoepFrameResourceNeedsCoepHeader.md +0 -10
- package/build/src/third_party/issue-descriptions/CompatibilityModeQuirks.md +0 -5
- package/build/src/third_party/issue-descriptions/CookieAttributeValueExceedsMaxSize.md +0 -5
- package/build/src/third_party/issue-descriptions/LowTextContrast.md +0 -5
- package/build/src/third_party/issue-descriptions/SameSiteExcludeContextDowngradeRead.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteExcludeContextDowngradeSet.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteExcludeNavigationContextDowngrade.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteNoneInsecureErrorRead.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteNoneInsecureErrorSet.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteNoneInsecureWarnRead.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteNoneInsecureWarnSet.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteUnspecifiedLaxAllowUnsafeRead.md +0 -9
- package/build/src/third_party/issue-descriptions/SameSiteUnspecifiedLaxAllowUnsafeSet.md +0 -9
- package/build/src/third_party/issue-descriptions/SameSiteWarnCrossDowngradeRead.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteWarnCrossDowngradeSet.md +0 -8
- package/build/src/third_party/issue-descriptions/SameSiteWarnStrictLaxDowngradeStrict.md +0 -8
- package/build/src/third_party/issue-descriptions/arInsecureContext.md +0 -7
- package/build/src/third_party/issue-descriptions/arInvalidInfoHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arInvalidRegisterOsSourceHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arInvalidRegisterOsTriggerHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arInvalidRegisterSourceHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arInvalidRegisterTriggerHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arNavigationRegistrationUniqueScopeAlreadySet.md +0 -5
- package/build/src/third_party/issue-descriptions/arNavigationRegistrationWithoutTransientUserActivation.md +0 -6
- package/build/src/third_party/issue-descriptions/arNoRegisterOsSourceHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arNoRegisterOsTriggerHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arNoRegisterSourceHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arNoRegisterTriggerHeader.md +0 -5
- package/build/src/third_party/issue-descriptions/arNoWebOrOsSupport.md +0 -4
- package/build/src/third_party/issue-descriptions/arOsSourceIgnored.md +0 -18
- package/build/src/third_party/issue-descriptions/arOsTriggerIgnored.md +0 -19
- package/build/src/third_party/issue-descriptions/arPermissionPolicyDisabled.md +0 -8
- package/build/src/third_party/issue-descriptions/arSourceAndTriggerHeaders.md +0 -9
- package/build/src/third_party/issue-descriptions/arSourceIgnored.md +0 -13
- package/build/src/third_party/issue-descriptions/arTriggerIgnored.md +0 -12
- package/build/src/third_party/issue-descriptions/arUntrustworthyReportingOrigin.md +0 -10
- package/build/src/third_party/issue-descriptions/arWebAndOsHeaders.md +0 -11
- package/build/src/third_party/issue-descriptions/bounceTrackingMitigations.md +0 -3
- package/build/src/third_party/issue-descriptions/clientHintMetaTagAllowListInvalidOrigin.md +0 -4
- package/build/src/third_party/issue-descriptions/clientHintMetaTagModifiedHTML.md +0 -4
- package/build/src/third_party/issue-descriptions/connectionAllowlistInvalidAllowlistItemType.md +0 -12
- package/build/src/third_party/issue-descriptions/connectionAllowlistInvalidHeader.md +0 -12
- package/build/src/third_party/issue-descriptions/connectionAllowlistInvalidUrlPattern.md +0 -8
- package/build/src/third_party/issue-descriptions/connectionAllowlistItemNotInnerList.md +0 -12
- package/build/src/third_party/issue-descriptions/connectionAllowlistMoreThanOneList.md +0 -7
- package/build/src/third_party/issue-descriptions/connectionAllowlistReportingEndpointNotToken.md +0 -10
- package/build/src/third_party/issue-descriptions/cookieCrossSiteRedirectDowngrade.md +0 -12
- package/build/src/third_party/issue-descriptions/cookieExcludeBlockedWithinRelatedWebsiteSet.md +0 -4
- package/build/src/third_party/issue-descriptions/cookieExcludeDomainNonAscii.md +0 -11
- package/build/src/third_party/issue-descriptions/cookieExcludePortMismatch.md +0 -8
- package/build/src/third_party/issue-descriptions/cookieExcludeSchemeMismatch.md +0 -7
- package/build/src/third_party/issue-descriptions/cookieExcludeThirdPartyPhaseoutRead.md +0 -6
- package/build/src/third_party/issue-descriptions/cookieExcludeThirdPartyPhaseoutSet.md +0 -6
- package/build/src/third_party/issue-descriptions/cookieWarnDomainNonAscii.md +0 -11
- package/build/src/third_party/issue-descriptions/cookieWarnMetadataGrantRead.md +0 -4
- package/build/src/third_party/issue-descriptions/cookieWarnMetadataGrantSet.md +0 -4
- package/build/src/third_party/issue-descriptions/cookieWarnThirdPartyPhaseoutRead.md +0 -6
- package/build/src/third_party/issue-descriptions/cookieWarnThirdPartyPhaseoutSet.md +0 -6
- package/build/src/third_party/issue-descriptions/corsAllowCredentialsRequired.md +0 -6
- package/build/src/third_party/issue-descriptions/corsDisabledScheme.md +0 -7
- package/build/src/third_party/issue-descriptions/corsDisallowedByMode.md +0 -7
- package/build/src/third_party/issue-descriptions/corsHeaderDisallowedByPreflightResponse.md +0 -5
- package/build/src/third_party/issue-descriptions/corsInvalidHeaderValues.md +0 -7
- package/build/src/third_party/issue-descriptions/corsLocalNetworkAccessPermissionDenied.md +0 -19
- package/build/src/third_party/issue-descriptions/corsMethodDisallowedByPreflightResponse.md +0 -5
- package/build/src/third_party/issue-descriptions/corsNoCorsRedirectModeNotFollow.md +0 -5
- package/build/src/third_party/issue-descriptions/corsOriginMismatch.md +0 -6
- package/build/src/third_party/issue-descriptions/corsPreflightResponseInvalid.md +0 -5
- package/build/src/third_party/issue-descriptions/corsRedirectContainsCredentials.md +0 -5
- package/build/src/third_party/issue-descriptions/corsWildcardOriginNotAllowed.md +0 -8
- package/build/src/third_party/issue-descriptions/cspEvalViolation.md +0 -9
- package/build/src/third_party/issue-descriptions/cspInlineViolation.md +0 -10
- package/build/src/third_party/issue-descriptions/cspTrustedTypesPolicyViolation.md +0 -5
- package/build/src/third_party/issue-descriptions/cspTrustedTypesSinkViolation.md +0 -8
- package/build/src/third_party/issue-descriptions/cspURLViolation.md +0 -10
- package/build/src/third_party/issue-descriptions/deprecation.md +0 -3
- package/build/src/third_party/issue-descriptions/federatedAuthRequestAccountsHttpNotFound.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestAccountsInvalidResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestAccountsNoResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestApprovalDeclined.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestCanceled.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestErrorFetchingSignin.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestErrorIdToken.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestIdTokenHttpNotFound.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestIdTokenInvalidRequest.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestIdTokenInvalidResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestIdTokenNoResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestInvalidSigninResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestManifestHttpNotFound.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestManifestInvalidResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestManifestNoResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthRequestTooManyRequests.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestInvalidAccountsResponse.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestInvalidConfigOrWellKnown.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNoAccountSharingPermission.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNoApiPermission.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNoReturningUserFromFetchedAccounts.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNotIframe.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNotPotentiallyTrustworthy.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNotSameOrigin.md +0 -1
- package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNotSignedInWithIdp.md +0 -1
- package/build/src/third_party/issue-descriptions/fetchingPartitionedBlobURL.md +0 -7
- package/build/src/third_party/issue-descriptions/genericFormAriaLabelledByToNonExistingIdError.md +0 -8
- package/build/src/third_party/issue-descriptions/genericFormAutocompleteAttributeEmptyError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormDuplicateIdForInputError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormEmptyIdAndNameAttributesForInputError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormInputAssignedAutocompleteValueToIdOrNameAttributeError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormInputHasWrongButWellIntendedAutocompleteValueError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormInputWithNoLabelError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormLabelForMatchesNonExistingIdError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormLabelForNameError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericFormLabelHasNeitherForNorNestedInputError.md +0 -5
- package/build/src/third_party/issue-descriptions/genericNavigationEntryMarkedSkippable.md +0 -7
- package/build/src/third_party/issue-descriptions/genericResponseWasBlockedByORB.md +0 -4
- package/build/src/third_party/issue-descriptions/heavyAd.md +0 -10
- package/build/src/third_party/issue-descriptions/mixedContent.md +0 -5
- package/build/src/third_party/issue-descriptions/navigatingPartitionedBlobURL.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementActivationDisabled.md +0 -7
- package/build/src/third_party/issue-descriptions/permissionElementActivationDisabledWithOccluder.md +0 -9
- package/build/src/third_party/issue-descriptions/permissionElementActivationDisabledWithOccluderParent.md +0 -9
- package/build/src/third_party/issue-descriptions/permissionElementCspFrameAncestorsMissing.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementFencedFrameDisallowed.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementFontSizeTooLarge.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementFontSizeTooSmall.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementGeolocationDeprecated.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementInsetBoxShadowUnsupported.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementInvalidDisplayStyle.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementInvalidSizeValue.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementInvalidType.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementInvalidTypeActivation.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementLowContrast.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementNonOpaqueColor.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementPaddingBottomUnsupported.md +0 -6
- package/build/src/third_party/issue-descriptions/permissionElementPaddingRightUnsupported.md +0 -6
- package/build/src/third_party/issue-descriptions/permissionElementPermissionsPolicyBlocked.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementRegistrationFailed.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementRequestInProgress.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementSecurityChecksFailed.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementTypeNotSupported.md +0 -5
- package/build/src/third_party/issue-descriptions/permissionElementUntrustedEvent.md +0 -7
- package/build/src/third_party/issue-descriptions/placeholderDescriptionForInvisibleIssues.md +0 -3
- package/build/src/third_party/issue-descriptions/propertyRuleInvalidNameIssue.md +0 -3
- package/build/src/third_party/issue-descriptions/propertyRuleIssue.md +0 -7
- package/build/src/third_party/issue-descriptions/selectElementAccessibilityDisallowedOptGroupChild.md +0 -7
- package/build/src/third_party/issue-descriptions/selectElementAccessibilityDisallowedSelectChild.md +0 -7
- package/build/src/third_party/issue-descriptions/selectElementAccessibilityInteractiveContentAttributesSelectDescendant.md +0 -3
- package/build/src/third_party/issue-descriptions/selectElementAccessibilityInteractiveContentLegendChild.md +0 -3
- package/build/src/third_party/issue-descriptions/selectElementAccessibilityInteractiveContentOptionChild.md +0 -3
- package/build/src/third_party/issue-descriptions/selectElementAccessibilityNonPhrasingContentOptionChild.md +0 -3
- package/build/src/third_party/issue-descriptions/selectivePermissionsIntervention.md +0 -7
- package/build/src/third_party/issue-descriptions/sharedArrayBuffer.md +0 -7
- package/build/src/third_party/issue-descriptions/sharedDictionaryUseErrorCrossOriginNoCorsRequest.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryUseErrorDictionaryLoadFailure.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryUseErrorMatchingDictionaryNotUsed.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryUseErrorUnexpectedContentDictionaryHeader.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorCossOriginNoCorsRequest.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorDisallowedBySettings.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorExpiredResponse.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorFeatureDisabled.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorInsufficientResources.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorInvalidMatchField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorInvalidStructuredHeader.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorInvalidTTLField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNavigationRequest.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNoMatchField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonIntegerTTLField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonListMatchDestField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonSecureContext.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonStringIdField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonStringInMatchDestList.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonStringMatchField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorNonTokenTypeField.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorRequestAborted.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorShuttingDown.md +0 -1
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorTooLongIdField.md +0 -3
- package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorUnsupportedType.md +0 -3
- package/build/src/third_party/issue-descriptions/sriInvalidSignatureHeader.md +0 -14
- package/build/src/third_party/issue-descriptions/sriInvalidSignatureInputHeader.md +0 -15
- package/build/src/third_party/issue-descriptions/sriMissingSignatureHeader.md +0 -8
- package/build/src/third_party/issue-descriptions/sriMissingSignatureInputHeader.md +0 -7
- package/build/src/third_party/issue-descriptions/sriSignatureHeaderValueIsIncorrectLength.md +0 -11
- package/build/src/third_party/issue-descriptions/sriSignatureHeaderValueIsNotByteSequence.md +0 -14
- package/build/src/third_party/issue-descriptions/sriSignatureHeaderValueIsParameterized.md +0 -15
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderInvalidComponentName.md +0 -8
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderInvalidComponentType.md +0 -13
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderInvalidDerivedComponentParameter.md +0 -4
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderInvalidHeaderComponentParameter.md +0 -5
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderInvalidParameter.md +0 -11
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderKeyIdLength.md +0 -12
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderMissingLabel.md +0 -6
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderMissingRequiredParameters.md +0 -8
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderValueMissingComponents.md +0 -11
- package/build/src/third_party/issue-descriptions/sriSignatureInputHeaderValueNotInnerList.md +0 -11
- package/build/src/third_party/issue-descriptions/sriValidationFailedIntegrityMismatch.md +0 -10
- package/build/src/third_party/issue-descriptions/sriValidationFailedInvalidLength.md +0 -5
- package/build/src/third_party/issue-descriptions/sriValidationFailedSignatureExpired.md +0 -6
- package/build/src/third_party/issue-descriptions/sriValidationFailedSignatureMismatch.md +0 -11
- package/build/src/third_party/issue-descriptions/stylesheetLateImport.md +0 -4
- package/build/src/third_party/issue-descriptions/stylesheetRequestFailed.md +0 -3
- package/build/src/third_party/issue-descriptions/summaryElementAccessibilityInteractiveContentSummaryDescendant.md +0 -3
- package/build/src/third_party/issue-descriptions/unencodedDigestIncorrectDigestLength.md +0 -12
- package/build/src/third_party/issue-descriptions/unencodedDigestIncorrectDigestType.md +0 -17
- package/build/src/third_party/issue-descriptions/unencodedDigestMalformedDictionary.md +0 -14
- package/build/src/third_party/issue-descriptions/unencodedDigestUnknownAlgorithm.md +0 -15
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
# Ensure CORS requesting origin matches resource's allowed origin
|
|
2
|
-
|
|
3
|
-
A cross-origin resource sharing (CORS) request was blocked because the `Access-Control-Allow-Origin` response header of the request or the associated [preflight request](issueCorsPreflightRequest) specified an origin different from the origin of the context that initiated the request.
|
|
4
|
-
|
|
5
|
-
To fix this issue, ensure that the `Access-Control-Allow-Origin` header for the resource matches the request context's origin.
|
|
6
|
-
If the resource never needs to be accessed with credentials, the `Access-Control-Allow-Origin` header may be set to a wildcard `*` to allow access from everywhere.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Ensure preflight responses are valid
|
|
2
|
-
|
|
3
|
-
A cross-origin resource sharing (CORS) request was blocked because the response to the associated [preflight request](issueCorsPreflightRequest) failed, had an unsuccessful HTTP status code, and/or was a redirect.
|
|
4
|
-
|
|
5
|
-
To fix this issue, ensure all CORS preflight `OPTIONS` requests are answered with a successful HTTP status code (2xx) and do not redirect.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Ensure CORS requests are not redirected to URLs containing credentials
|
|
2
|
-
|
|
3
|
-
A cross-origin resource sharing (CORS) request was blocked because the response was a redirect to a URL that includes credentials, i.e. redirected to a URL of the form `https://username:password@example.com`.
|
|
4
|
-
|
|
5
|
-
To fix this issue, ensure CORS requests are not redirected to URLs that include credentials.
|
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
# Ensure credentialed requests are not sent to CORS resources with origin wildcards
|
|
2
|
-
|
|
3
|
-
A cross-origin resource sharing (CORS) request was blocked because it was configured to `include` credentials and the `Access-Control-Allow-Origin` response header of the request or the associated [preflight request](issueCorsPreflightRequest) was set to a wildcard `*`. CORS requests may only include credentials for resources where the `Access-Control-Allow-Origin` header is not a wildcard.
|
|
4
|
-
|
|
5
|
-
To fix this issue, ensure that either the request is configured to not include credentials, or change the `Access-Control-Allow-Origin` header of the resource to not be a wildcard.
|
|
6
|
-
|
|
7
|
-
Note that if an opaque response is sufficient, the request's mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers are not required but credentials are not sent and the response content is inaccessible (opaque).
|
|
8
|
-
|
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
# Content Security Policy of your site blocks the use of 'eval' in JavaScript`
|
|
2
|
-
|
|
3
|
-
The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.
|
|
4
|
-
|
|
5
|
-
To solve this issue, avoid using `eval()`, `new Function()`, `setTimeout([string], ...)` and `setInterval([string], ...)` for evaluating strings.
|
|
6
|
-
|
|
7
|
-
If you absolutely must: you can enable string evaluation by adding `unsafe-eval` as an allowed source in a `script-src` directive.
|
|
8
|
-
|
|
9
|
-
⚠️ Allowing string evaluation comes at the risk of inline script injection.
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
# Content Security Policy blocks inline execution of scripts and stylesheets
|
|
2
|
-
|
|
3
|
-
The Content Security Policy (CSP) prevents cross-site scripting attacks by blocking inline execution of scripts and style sheets.
|
|
4
|
-
|
|
5
|
-
To solve this, move all inline scripts (e.g. `onclick=[JS code]`) and styles into external files.
|
|
6
|
-
|
|
7
|
-
⚠️ Allowing inline execution comes at the risk of script injection via injection of HTML script elements. If you absolutely must, you can allow inline script and styles by:
|
|
8
|
-
|
|
9
|
-
* adding `unsafe-inline` as a source to the CSP header
|
|
10
|
-
* adding the hash or nonce of the inline script to your CSP header.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Trusted Type policy creation blocked by Content Security Policy
|
|
2
|
-
|
|
3
|
-
Your site tries to create a Trusted Type policy that has not been allowed by the Content Security Policy. The Content Security Policy may restrict the set of valid names for Trusted Type policies, and forbid more than one policy of each name.
|
|
4
|
-
|
|
5
|
-
To solve this, make sure that the names of the policies listed below are declared in the `trusted-types` CSP directive. To allow redefining policies add the `allow-duplicates` keyword. If you want to remove all restrictions on policy names, remove the `trusted-types` directive entirely (not recommended).
|
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
# Trusted Type expected, but String received
|
|
2
|
-
|
|
3
|
-
Your site tries to use a plain string in a DOM modification where a Trusted Type is expected. Requiring Trusted Types for DOM modifications helps to prevent cross-site scripting attacks.
|
|
4
|
-
|
|
5
|
-
To solve this, provide a Trusted Type to all the DOM modifications listed below. You can convert a string into a Trusted Type by:
|
|
6
|
-
|
|
7
|
-
* defining a policy and using its corresponding `createHTML`, `createScript` or `createScriptURL` function.
|
|
8
|
-
* defining a policy named `default` which will be automatically called.
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
# Content Security Policy of your site blocks some resources
|
|
2
|
-
|
|
3
|
-
Some resources are blocked because their origin is not listed in your site's Content Security Policy (CSP). Your site's CSP is allowlist-based, so resources must be listed in the allowlist in order to be accessed.
|
|
4
|
-
|
|
5
|
-
A site's Content Security Policy is set either via an HTTP header (recommended), or via a meta HTML tag.
|
|
6
|
-
|
|
7
|
-
To fix this issue do one of the following:
|
|
8
|
-
|
|
9
|
-
* (Recommended) If you're using an allowlist for `'script-src'`, consider switching from an allowlist CSP to a strict CSP, because strict CSPs are [more robust against XSS](issuesCSPWhyStrictOverAllowlist). [See how to set a strict CSP](issuesCSPSetStrict).
|
|
10
|
-
* Or carefully check that all of the blocked resources are trustworthy; if they are, include their sources in the CSP of your site. ⚠️Never add a source you don't trust to your site's CSP. If you don't trust the source, consider hosting resources on your own site instead.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestAccountsHttpNotFound.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The provider's accounts list endpoint cannot be found.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestAccountsInvalidResponse.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Provider's accounts list is invalid.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The response body is empty when fetching the provider's accounts list.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# User declined the sign-in attempt.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The request has been aborted.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Error attempting to reach the provider's sign-in endpoint.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Error retrieving a token.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The provider's id token endpoint cannot be found.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestIdTokenInvalidRequest.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The token fetching request is invalid.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestIdTokenInvalidResponse.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Provider's token is invalid.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The response body is empty when fetching the provider's token.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestInvalidSigninResponse.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Provider's sign-in response is invalid.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestManifestHttpNotFound.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The provider's FedCM manifest configuration cannot be found.
|
package/build/src/third_party/issue-descriptions/federatedAuthRequestManifestInvalidResponse.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Provider's FedCM manifest configuration is invalid.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# The response body is empty when fetching the provider's FedCM manifest configuration.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Only one navigator.credentials.get request may be outstanding at one time.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() failed because of an invalid accounts response.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() failed because the config and well-known files were invalid.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() failed because the user has not yet used FedCM on this site with the provided IDP.
|
package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNoApiPermission.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() is disabled because FedCM is disabled.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() failed because no account received was a returning account.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() caller is not an iframe.
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() failed because the config URL is not potentially trustworthy.
|
package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNotSameOrigin.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() caller is not same origin as the config URL.
|
package/build/src/third_party/issue-descriptions/federatedAuthUserInfoRequestNotSignedInWithIdp.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# getUserInfo() is disabled because the IDP Sign-In Status is signed-out.
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Fetching Partitioned Blob URL Issue
|
|
2
|
-
|
|
3
|
-
This issue occurs when a Blob URL access attempt was blocked because it was made from a cross-partition, same-origin context.
|
|
4
|
-
|
|
5
|
-
Make sure the Blob URL was created in the same [storage partition](storagePartitioningExplainer) as the context it is being fetched from.
|
|
6
|
-
|
|
7
|
-
If access to unpartitioned Blob URLs is needed, the Storage Access API [can be used](storageAccessAPI).
|
package/build/src/third_party/issue-descriptions/genericFormAriaLabelledByToNonExistingIdError.md
DELETED
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
# An aria-labelledby attribute doesn't match any element id
|
|
2
|
-
|
|
3
|
-
An `aria-labelledby` attribute doesn't match any element `id`. This might prevent
|
|
4
|
-
the browser from correctly autofilling the form and accessibility tools from
|
|
5
|
-
working correctly.
|
|
6
|
-
|
|
7
|
-
To fix this issue, make sure that `aria-labelledby` is a space-separated list of
|
|
8
|
-
element `id`s.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Duplicate form field id in the same form
|
|
2
|
-
|
|
3
|
-
Multiple form field elements in the same form have the same `id` attribute value. This might prevent the browser from correctly autofilling the form.
|
|
4
|
-
|
|
5
|
-
To fix this issue, use unique `id` attribute values for each form field.
|
package/build/src/third_party/issue-descriptions/genericFormEmptyIdAndNameAttributesForInputError.md
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# A form field element should have an id or name attribute
|
|
2
|
-
|
|
3
|
-
A form field element has neither an `id` nor a `name` attribute. This might prevent the browser from correctly autofilling the form.
|
|
4
|
-
|
|
5
|
-
To fix this issue, add a unique `id` or `name` attribute to a form field. This is not strictly needed, but still recommended even if you have an autocomplete attribute on the same element.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# An element doesn't have an autocomplete attribute
|
|
2
|
-
|
|
3
|
-
A form field has an `id` or `name` attribute that the browser's autofill recognizes. However, it doesn't have an `autocomplete` attribute assigned. This might prevent the browser from correctly autofilling the form.
|
|
4
|
-
|
|
5
|
-
To fix this issue, provide an `autocomplete` attribute.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Form field without valid aria-labelledby attribute or associated label
|
|
2
|
-
|
|
3
|
-
A form field has neither a valid `aria-labelledby` attribute nor an associated `<label>`. This might prevent the browser from correctly autofilling the form and accessibility tools from working correctly.
|
|
4
|
-
|
|
5
|
-
To fix this issue, provide a `<label>` describing the purpose of the form field.
|
package/build/src/third_party/issue-descriptions/genericFormLabelForMatchesNonExistingIdError.md
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Incorrect use of <label for=FORM_ELEMENT>
|
|
2
|
-
|
|
3
|
-
The label's `for` attribute doesn't match any element `id`. This might prevent the browser from correctly autofilling the form and accessibility tools from working correctly.
|
|
4
|
-
|
|
5
|
-
To fix this issue, make sure the label's `for` attribute references the correct `id` of a form field.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Incorrect use of <label for=FORM_ELEMENT>
|
|
2
|
-
|
|
3
|
-
The label's `for` attribute refers to a form field by its `name`, not its `id`. This might prevent the browser from correctly autofilling the form and accessibility tools from working correctly.
|
|
4
|
-
|
|
5
|
-
To fix this issue, refer to form fields by their `id` attribute.
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Session History Item Has Been Marked Skippable
|
|
2
|
-
|
|
3
|
-
A session history item was added by this document without any interaction from the
|
|
4
|
-
user. As a result, this document's history items will be skipped if the user goes
|
|
5
|
-
back or forward via the browser's UI (e.g., back/forward buttons), to prevent pages
|
|
6
|
-
from trapping a user. If the user interacts with the page, the history items
|
|
7
|
-
will no longer be skipped.
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
# An ad on your site has exceeded resource limits
|
|
2
|
-
|
|
3
|
-
Chrome identifies heavy ads on your site that use too many resources without a user gesture. Heavy ads have an impact on performance and harm the user’s browsing experience. They increase battery drain, consume mobile data, and make your site slow. To improve the user experience, Chrome warns about or removes heavy ads.
|
|
4
|
-
|
|
5
|
-
An ad is considered heavy if the user has not interacted with it (for example, has not tapped or clicked it) and it meets any of the following criteria:
|
|
6
|
-
* Uses the main thread for more than 60 seconds in total (CPU total limit)
|
|
7
|
-
* Uses the main thread for more than 15 seconds in any 30 second window (CPU peak limit)
|
|
8
|
-
* Uses more than 4 megabytes of network bandwidth (Network limit)
|
|
9
|
-
|
|
10
|
-
Stop this from happening by only showing ads that stay within resource limits.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Mixed content: load all resources via HTTPS to improve the security of your site
|
|
2
|
-
|
|
3
|
-
Even though the initial HTML page is loaded over a secure HTTPS connection, some resources like images, stylesheets or scripts are being accessed over an insecure HTTP connection. Usage of insecure resources is restricted to strengthen the security of your entire site.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, load all resources over a secure HTTPS connection.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Navigating Partitioned Blob URL Issue
|
|
2
|
-
|
|
3
|
-
This issue occurs when 'noopener' was enforced during navigation to a cross-partition, same-origin Blob URL. The navigation won't be blocked due to it being cross-partition, but APIs like window.open won't return a WindowProxy for the new window in this case.
|
|
4
|
-
|
|
5
|
-
If your application requires a WindowProxy object to be returned by navigating to the Blob URL, make sure the Blob URL has the same top-level site as the context it is navigated fetched from.
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Activation disabled
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element could not be activated for the following reason: {PLACEHOLDER_DisableReason}.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, ensure that the element follows all styling restrictions and is fully visible to the user.
|
|
6
|
-
|
|
7
|
-
You can use the command line flag `--runtime-enabled-features=BypassPepcSecurityForTesting` to bypass this behavior for testing purposes.
|
package/build/src/third_party/issue-descriptions/permissionElementActivationDisabledWithOccluder.md
DELETED
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
# Activation disabled
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element could not be activated for the following reason: {PLACEHOLDER_DisableReason}.
|
|
4
|
-
|
|
5
|
-
The element is occluded by: "{PLACEHOLDER_OccluderInfo}"
|
|
6
|
-
|
|
7
|
-
To resolve this issue, ensure that the element follows all styling restrictions and is fully visible to the user.
|
|
8
|
-
|
|
9
|
-
You can use the command line flag `--runtime-enabled-features=BypassPepcSecurityForTesting` to bypass this behavior for testing purposes.
|
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
# Activation disabled
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element could not be activated for the following reason: {PLACEHOLDER_DisableReason}.
|
|
4
|
-
|
|
5
|
-
The element is occluded by: "{PLACEHOLDER_OccluderInfo}" (parent element: "{PLACEHOLDER_OccluderParentInfo}")
|
|
6
|
-
|
|
7
|
-
To resolve this issue, ensure that the element follows all styling restrictions and is fully visible to the user.
|
|
8
|
-
|
|
9
|
-
You can use the command line flag `--runtime-enabled-features=BypassPepcSecurityForTesting` to bypass this behavior for testing purposes.
|
package/build/src/third_party/issue-descriptions/permissionElementCspFrameAncestorsMissing.md
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# CSP `frame-ancestors` missing
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element is used in a cross-origin iframe, but the required `frame-ancestors` Content Security Policy directive is missing.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, add a `frame-ancestors` Content Security Policy directive to the iframe.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Invalid type activation
|
|
2
|
-
|
|
3
|
-
An element with the "{PLACEHOLDER_Type}" type was attempted to be activated. However this type is not supported.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, ensure the element's type is one of the supported values: "camera", "microphone", "geolocation", "camera microphone".
|
package/build/src/third_party/issue-descriptions/permissionElementPaddingBottomUnsupported.md
DELETED
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
# Unsupported bottom padding
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element does not support `padding-bottom`.
|
|
4
|
-
`padding-bottom` is always set to be identical to `padding-top`.
|
|
5
|
-
|
|
6
|
-
To resolve this issue, ensure the element's `padding-bottom` is unset or identical to `padding-top`.
|
package/build/src/third_party/issue-descriptions/permissionElementPaddingRightUnsupported.md
DELETED
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
# Unsupported right padding
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element does not support `padding-right`.
|
|
4
|
-
`padding-right` is always set to be identical to `padding-left`.
|
|
5
|
-
|
|
6
|
-
To resolve this issue, ensure the element's `padding-right` is unset or identical to `padding-left`.
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Request in progress
|
|
2
|
-
|
|
3
|
-
A permission request on the "{PLACEHOLDER_Type}" element was prevented because a previous request is still in progress.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, ensure that the site does not allow users to interact with the element behind the current content scrim (for example by moving the element to a document in a new window, which is not covered by the scrim).
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Permission not supported
|
|
2
|
-
|
|
3
|
-
The permission type "{PLACEHOLDER_Type}" is not supported by this browser and therefore the element will not be functional.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, ensure the element's type is one of the supported values: "camera", "microphone", "geolocation", "camera microphone".
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Untrusted event
|
|
2
|
-
|
|
3
|
-
The "{PLACEHOLDER_Type}" element can only be activated by actual user clicks, not simulated ones.
|
|
4
|
-
|
|
5
|
-
To resolve this issue, do not use frameworks which simulate click events, (e.g. via `click()`) and do not prevent the `DOMActivate` event.
|
|
6
|
-
|
|
7
|
-
You can use the command line flag `--runtime-enabled-features=BypassPepcSecurityForTesting` to bypass this behavior for testing purposes.
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Invalid element or text node within <optgroup>
|
|
2
|
-
|
|
3
|
-
An element which is not allowed in the content model of the `<optgroup>` element was found within an `<optgroup>` element. These elements will not consistently be accessible to people navigating by keyboard or using assistive technology.
|
|
4
|
-
|
|
5
|
-
If using disallowed elements for layout structure and styling, consider using the allowed `<div>` element instead.
|
|
6
|
-
|
|
7
|
-
Any text existing within the `<optgroup>` element should either be removed or relocated to a valid element that allows text descendants, e.g., the `<legend>` or `<option>` elements.
|
package/build/src/third_party/issue-descriptions/selectElementAccessibilityDisallowedSelectChild.md
DELETED
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Invalid element or text node within <select>
|
|
2
|
-
|
|
3
|
-
An element which is not allowed in the content model of the `<select>` element was found within a `<select>` element. These elements will not consistently be accessible to people navigating by keyboard or using assistive technology.
|
|
4
|
-
|
|
5
|
-
If using disallowed elements for layout structure and styling, consider using the allowed `<div>` element instead.
|
|
6
|
-
|
|
7
|
-
Any text existing within the `<select>` element should either be removed or relocated to a valid element that allows text descendants, e.g., an `<optgroup>` with a `<legend>` element or `<option>` elements.
|
|
@@ -1,3 +0,0 @@
|
|
|
1
|
-
# Interactive element inside of a <legend> element
|
|
2
|
-
|
|
3
|
-
An interactive element which is not allowed in the content model of the `<legend>` element was found within a `<legend>` element. Interactive elements are not allowed children of a `<legend>` element when used within an `<optgroup>` element. These elements will not consistently be accessible to people navigating by keyboard or using assistive technology.
|
|
@@ -1,3 +0,0 @@
|
|
|
1
|
-
# Interactive element inside of an <option> element
|
|
2
|
-
|
|
3
|
-
An interactive element which is not allowed in the content model of the `<option>` element was found within an `<option>` element. These elements will not consistently be accessible to people navigating by keyboard or using assistive technology.
|
|
@@ -1,3 +0,0 @@
|
|
|
1
|
-
# Non-phrasing content used within an <option> element
|
|
2
|
-
|
|
3
|
-
The `<option>` element allows only non-interactive phrasing content, text, and `<div>` elements as its children. The semantics of non-phrasing content elements do not make sense as children of an `<option>`, and such semantics will largely be ignored by assistive technology since they are inappropriate in this context. Consider removing or changing such elements to one of the allowed phrasing content elements.
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# Selective Permissions Intervention
|
|
2
|
-
|
|
3
|
-
The Selective Permissions Intervention blocks calls to privacy-sensitive APIs when they are called from ad scripts in order to align the permission grant with the user's intent. The particular API that was blocked, the call-stack that triggered the intervention, and why the script that called the API is considered ad-related is shown below.
|
|
4
|
-
|
|
5
|
-
Note that Chrome considers any script with a URL that matches a rule in the [filterlist](ChromeFilterlistRepository) as ad script, and the matching rule is shown in the Ad Ancestry section. In addition, any script loaded while an ad script is in the JavaScript stack will also be considered an ad script by Chrome and is also shown in Ad Ancestry.
|
|
6
|
-
|
|
7
|
-
If you believe this intervention was in error (e.g., this call would occur even when loading the page with an ad blocker enabled), then please [file a bug](SelectivePermissionsInterventionIssue).
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
# SharedArrayBuffer usage is restricted to cross-origin isolated sites
|
|
2
|
-
|
|
3
|
-
SharedArrayBuffers (SABs) can be used to construct high-resolution timers. High-resolution timers simplify Spectre attacks on cross-origin resources.
|
|
4
|
-
|
|
5
|
-
To mitigate security risks across browsers, SharedArrayBuffers are gated behind cross-origin isolated contexts starting with Chrome 92 (July 2021). To continue using SharedArrayBuffers, please ensure that this page opts-into cross-origin isolation by setting Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy appropriately.
|
|
6
|
-
|
|
7
|
-
Note that for each iframe, only the first issue is reported for performance reasons.
|
package/build/src/third_party/issue-descriptions/sharedDictionaryUseErrorCrossOriginNoCorsRequest.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Found a matching dictionary, but the dictionary can't be used for the cross origin no-cors request
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Can't decode the response because the header of dictionary compressed stream was not set correctly
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Can't register the cross origin response fetched by a no-cors request as as a dictionary
|
package/build/src/third_party/issue-descriptions/sharedDictionaryWriteErrorDisallowedBySettings.md
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
# Compression Dictionary is disabled by settings
|