chrome-devtools-frontend 1.0.1665921 → 1.0.1666631

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (242) hide show
  1. package/.agents/skills/devtools-testing-guidance/SKILL.md +4 -0
  2. package/.agents/skills/migrate-chromium-test/SKILL.md +63 -48
  3. package/.agents/skills/ui-eng-vision-local-lit-renderer/SKILL.md +14 -5
  4. package/.agents/skills/ui-eng-vision-logic-consolidator/SKILL.md +11 -2
  5. package/.agents/skills/ui-eng-vision-orchestrator/SKILL.md +46 -9
  6. package/.agents/skills/ui-eng-vision-test-scaffolder/SKILL.md +20 -1
  7. package/.agents/skills/ui-eng-vision-widget-promoter/SKILL.md +9 -0
  8. package/front_end/core/host/AidaClient.ts +109 -60
  9. package/front_end/core/host/GcaClient.ts +3 -3
  10. package/front_end/core/host/UserMetrics.ts +1 -12
  11. package/front_end/core/sdk/NetworkRequest.ts +10 -55
  12. package/front_end/entrypoints/main/MainImpl.ts +0 -10
  13. package/front_end/foundation/Universe.ts +16 -0
  14. package/front_end/generated/InspectorBackendCommands.ts +2 -2
  15. package/front_end/generated/protocol.ts +2 -1
  16. package/front_end/models/ai_assistance/agents/AiAgent.ts +22 -13
  17. package/front_end/models/ai_assistance/data_formatters/PerformanceTraceFormatter.ts +21 -5
  18. package/front_end/models/issues_manager/CookieIssue.ts +6 -127
  19. package/front_end/models/issues_manager/descriptions/CoepCorpNotSameOrigin.md +2 -2
  20. package/front_end/models/issues_manager/descriptions/CoepCorpNotSameOriginAfterDefaultedToSameOriginByCoep.md +3 -3
  21. package/front_end/models/issues_manager/descriptions/CoepCorpNotSameSite.md +2 -2
  22. package/front_end/models/issues_manager/descriptions/CoepFrameResourceNeedsCoepHeader.md +1 -1
  23. package/front_end/models/issues_manager/descriptions/CompatibilityModeQuirks.md +1 -1
  24. package/front_end/models/issues_manager/descriptions/CookieAttributeValueExceedsMaxSize.md +2 -2
  25. package/front_end/models/issues_manager/descriptions/LowTextContrast.md +1 -1
  26. package/front_end/models/issues_manager/descriptions/SameSiteNoneInsecureErrorRead.md +1 -1
  27. package/front_end/models/issues_manager/descriptions/SameSiteNoneInsecureErrorSet.md +1 -1
  28. package/front_end/models/issues_manager/descriptions/SameSiteNoneInsecureWarnRead.md +1 -1
  29. package/front_end/models/issues_manager/descriptions/SameSiteNoneInsecureWarnSet.md +1 -1
  30. package/front_end/models/issues_manager/descriptions/SameSiteUnspecifiedLaxAllowUnsafeRead.md +3 -3
  31. package/front_end/models/issues_manager/descriptions/SameSiteUnspecifiedLaxAllowUnsafeSet.md +3 -3
  32. package/front_end/models/issues_manager/descriptions/bounceTrackingMitigations.md +1 -1
  33. package/front_end/models/issues_manager/descriptions/connectionAllowlistInvalidAllowlistItemType.md +2 -2
  34. package/front_end/models/issues_manager/descriptions/connectionAllowlistInvalidHeader.md +2 -2
  35. package/front_end/models/issues_manager/descriptions/connectionAllowlistInvalidUrlPattern.md +3 -3
  36. package/front_end/models/issues_manager/descriptions/connectionAllowlistItemNotInnerList.md +2 -2
  37. package/front_end/models/issues_manager/descriptions/connectionAllowlistMoreThanOneList.md +2 -2
  38. package/front_end/models/issues_manager/descriptions/connectionAllowlistReportingEndpointNotToken.md +1 -1
  39. package/front_end/models/issues_manager/descriptions/cookieCrossSiteRedirectDowngrade.md +3 -3
  40. package/front_end/models/issues_manager/descriptions/cookieExcludeBlockedWithinRelatedWebsiteSet.md +1 -1
  41. package/front_end/models/issues_manager/descriptions/cookieExcludePortMismatch.md +1 -1
  42. package/front_end/models/issues_manager/descriptions/cookieExcludeSchemeMismatch.md +1 -1
  43. package/front_end/models/issues_manager/descriptions/cookieExcludeThirdPartyPhaseoutSet.md +1 -1
  44. package/front_end/models/issues_manager/descriptions/cookieWarnThirdPartyPhaseoutRead.md +1 -1
  45. package/front_end/models/issues_manager/descriptions/corsAllowCredentialsRequired.md +1 -1
  46. package/front_end/models/issues_manager/descriptions/corsDisabledScheme.md +2 -2
  47. package/front_end/models/issues_manager/descriptions/corsDisallowedByMode.md +2 -2
  48. package/front_end/models/issues_manager/descriptions/corsHeaderDisallowedByPreflightResponse.md +1 -1
  49. package/front_end/models/issues_manager/descriptions/corsInvalidHeaderValues.md +3 -3
  50. package/front_end/models/issues_manager/descriptions/corsLocalNetworkAccessPermissionDenied.md +1 -1
  51. package/front_end/models/issues_manager/descriptions/corsMethodDisallowedByPreflightResponse.md +1 -1
  52. package/front_end/models/issues_manager/descriptions/corsNoCorsRedirectModeNotFollow.md +1 -1
  53. package/front_end/models/issues_manager/descriptions/corsOriginMismatch.md +3 -3
  54. package/front_end/models/issues_manager/descriptions/corsPreflightResponseInvalid.md +2 -2
  55. package/front_end/models/issues_manager/descriptions/corsRedirectContainsCredentials.md +3 -3
  56. package/front_end/models/issues_manager/descriptions/corsWildcardOriginNotAllowed.md +4 -3
  57. package/front_end/models/issues_manager/descriptions/cspEvalViolation.md +4 -4
  58. package/front_end/models/issues_manager/descriptions/cspInlineViolation.md +2 -2
  59. package/front_end/models/issues_manager/descriptions/cspTrustedTypesPolicyViolation.md +2 -2
  60. package/front_end/models/issues_manager/descriptions/cspTrustedTypesSinkViolation.md +4 -4
  61. package/front_end/models/issues_manager/descriptions/cspURLViolation.md +4 -4
  62. package/front_end/models/issues_manager/descriptions/emailVerificationRequestAccountsEmptyList.md +1 -1
  63. package/front_end/models/issues_manager/descriptions/emailVerificationRequestAccountsHttpNotFound.md +1 -1
  64. package/front_end/models/issues_manager/descriptions/emailVerificationRequestAccountsInvalidContentType.md +1 -1
  65. package/front_end/models/issues_manager/descriptions/emailVerificationRequestAccountsInvalidResponse.md +1 -1
  66. package/front_end/models/issues_manager/descriptions/emailVerificationRequestAccountsNoResponse.md +1 -1
  67. package/front_end/models/issues_manager/descriptions/emailVerificationRequestDnsFetchFailed.md +1 -1
  68. package/front_end/models/issues_manager/descriptions/emailVerificationRequestDnsInvalidRecord.md +1 -1
  69. package/front_end/models/issues_manager/descriptions/emailVerificationRequestEmailVerificationWellKnownHttpNotFound.md +1 -1
  70. package/front_end/models/issues_manager/descriptions/emailVerificationRequestEmailVerificationWellKnownInvalidContentType.md +1 -1
  71. package/front_end/models/issues_manager/descriptions/emailVerificationRequestEmailVerificationWellKnownInvalidResponse.md +1 -1
  72. package/front_end/models/issues_manager/descriptions/emailVerificationRequestEmailVerificationWellKnownNoResponse.md +1 -1
  73. package/front_end/models/issues_manager/descriptions/emailVerificationRequestInvalidEmail.md +1 -1
  74. package/front_end/models/issues_manager/descriptions/emailVerificationRequestJwksHttpNotFound.md +1 -1
  75. package/front_end/models/issues_manager/descriptions/emailVerificationRequestJwksInvalidResponse.md +1 -1
  76. package/front_end/models/issues_manager/descriptions/emailVerificationRequestKeyBindingSigningFailed.md +1 -1
  77. package/front_end/models/issues_manager/descriptions/emailVerificationRequestRpOriginIsOpaque.md +1 -1
  78. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenHttpNotFound.md +1 -1
  79. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenInvalidContentType.md +1 -1
  80. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenInvalidResponse.md +1 -1
  81. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenInvalidSdJwt.md +1 -1
  82. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenMalformedSdJwt.md +1 -1
  83. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenNoResponse.md +1 -1
  84. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbInvalidAudience.md +1 -1
  85. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbInvalidIssuedAt.md +1 -1
  86. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbInvalidNonce.md +1 -1
  87. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbInvalidSdHash.md +1 -1
  88. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbInvalidTyp.md +1 -1
  89. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbMissingAud.md +1 -1
  90. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbMissingCnf.md +1 -1
  91. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbMissingIat.md +1 -1
  92. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbMissingNonce.md +1 -1
  93. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbMissingSdHash.md +1 -1
  94. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationKbSignatureFailed.md +1 -1
  95. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtInvalidEmail.md +1 -1
  96. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtInvalidEmailVerified.md +1 -1
  97. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtInvalidHolderKey.md +1 -1
  98. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtInvalidIssuedAt.md +1 -1
  99. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtInvalidIssuer.md +1 -1
  100. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtJwksMissingKeys.md +1 -1
  101. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtMissingCnf.md +1 -1
  102. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtMissingEmail.md +1 -1
  103. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtMissingIat.md +1 -1
  104. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtMissingIss.md +1 -1
  105. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtSignatureFailed.md +1 -1
  106. package/front_end/models/issues_manager/descriptions/emailVerificationRequestTokenVerificationSdJwtUnsupportedHeaderAlg.md +1 -1
  107. package/front_end/models/issues_manager/descriptions/emailVerificationRequestUserLoggedOut.md +1 -1
  108. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownAccountsEndpointCrossOrigin.md +1 -1
  109. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownHttpNotFound.md +1 -1
  110. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownInvalidContentType.md +1 -1
  111. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownInvalidResponse.md +1 -1
  112. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownIssuanceEndpointCrossOrigin.md +1 -1
  113. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownListEmpty.md +1 -1
  114. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownMissingAccountsEndpoint.md +1 -1
  115. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownMissingIssuanceEndpoint.md +1 -1
  116. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownNoResponse.md +1 -1
  117. package/front_end/models/issues_manager/descriptions/emailVerificationRequestWellKnownUnsupportedSigningAlgorithm.md +1 -1
  118. package/front_end/models/issues_manager/descriptions/federatedAuthRequestAccountsHttpNotFound.md +1 -1
  119. package/front_end/models/issues_manager/descriptions/federatedAuthRequestAccountsInvalidResponse.md +1 -1
  120. package/front_end/models/issues_manager/descriptions/federatedAuthRequestAccountsNoResponse.md +1 -1
  121. package/front_end/models/issues_manager/descriptions/federatedAuthRequestApprovalDeclined.md +1 -1
  122. package/front_end/models/issues_manager/descriptions/federatedAuthRequestCanceled.md +1 -1
  123. package/front_end/models/issues_manager/descriptions/federatedAuthRequestErrorFetchingSignin.md +1 -1
  124. package/front_end/models/issues_manager/descriptions/federatedAuthRequestErrorIdToken.md +1 -1
  125. package/front_end/models/issues_manager/descriptions/federatedAuthRequestIdTokenHttpNotFound.md +1 -1
  126. package/front_end/models/issues_manager/descriptions/federatedAuthRequestIdTokenInvalidRequest.md +1 -1
  127. package/front_end/models/issues_manager/descriptions/federatedAuthRequestIdTokenInvalidResponse.md +1 -1
  128. package/front_end/models/issues_manager/descriptions/federatedAuthRequestIdTokenNoResponse.md +1 -1
  129. package/front_end/models/issues_manager/descriptions/federatedAuthRequestInvalidSigninResponse.md +1 -1
  130. package/front_end/models/issues_manager/descriptions/federatedAuthRequestManifestHttpNotFound.md +1 -1
  131. package/front_end/models/issues_manager/descriptions/federatedAuthRequestManifestInvalidResponse.md +1 -1
  132. package/front_end/models/issues_manager/descriptions/federatedAuthRequestManifestNoResponse.md +1 -1
  133. package/front_end/models/issues_manager/descriptions/federatedAuthRequestTooManyRequests.md +1 -1
  134. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestInvalidAccountsResponse.md +1 -1
  135. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestInvalidConfigOrWellKnown.md +1 -1
  136. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNoAccountSharingPermission.md +1 -1
  137. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNoApiPermission.md +1 -1
  138. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNoReturningUserFromFetchedAccounts.md +1 -1
  139. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNotIframe.md +1 -1
  140. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNotPotentiallyTrustworthy.md +1 -1
  141. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNotSameOrigin.md +1 -1
  142. package/front_end/models/issues_manager/descriptions/federatedAuthUserInfoRequestNotSignedInWithIdp.md +1 -1
  143. package/front_end/models/issues_manager/descriptions/fetchingPartitionedBlobURL.md +2 -2
  144. package/front_end/models/issues_manager/descriptions/genericFormAriaLabelledByToNonExistingIdError.md +2 -2
  145. package/front_end/models/issues_manager/descriptions/genericFormAutocompleteAttributeEmptyError.md +1 -1
  146. package/front_end/models/issues_manager/descriptions/genericFormDuplicateIdForInputError.md +1 -1
  147. package/front_end/models/issues_manager/descriptions/genericFormEmptyIdAndNameAttributesForInputError.md +2 -2
  148. package/front_end/models/issues_manager/descriptions/genericFormInputAssignedAutocompleteValueToIdOrNameAttributeError.md +2 -2
  149. package/front_end/models/issues_manager/descriptions/genericFormInputHasWrongButWellIntendedAutocompleteValueError.md +1 -1
  150. package/front_end/models/issues_manager/descriptions/genericFormInputWithNoLabelError.md +1 -1
  151. package/front_end/models/issues_manager/descriptions/genericFormLabelForMatchesNonExistingIdError.md +2 -2
  152. package/front_end/models/issues_manager/descriptions/genericFormLabelForNameError.md +1 -1
  153. package/front_end/models/issues_manager/descriptions/genericFormLabelHasNeitherForNorNestedInputError.md +1 -1
  154. package/front_end/models/issues_manager/descriptions/genericFormModelContextMissingToolName.md +1 -1
  155. package/front_end/models/issues_manager/descriptions/genericFormModelContextParameterMissingName.md +1 -1
  156. package/front_end/models/issues_manager/descriptions/genericFormModelContextRequiredParameterMissingName.md +1 -1
  157. package/front_end/models/issues_manager/descriptions/genericNavigationEntryMarkedSkippable.md +2 -2
  158. package/front_end/models/issues_manager/descriptions/heavyAd.md +1 -1
  159. package/front_end/models/issues_manager/descriptions/lazyLoadImageZeroSize.md +1 -1
  160. package/front_end/models/issues_manager/descriptions/navigatingPartitionedBlobURL.md +3 -3
  161. package/front_end/models/issues_manager/descriptions/permissionElementActivationDisabled.md +1 -1
  162. package/front_end/models/issues_manager/descriptions/permissionElementActivationDisabledWithOccluder.md +1 -1
  163. package/front_end/models/issues_manager/descriptions/permissionElementActivationDisabledWithOccluderParent.md +1 -1
  164. package/front_end/models/issues_manager/descriptions/permissionElementFencedFrameDisallowed.md +2 -2
  165. package/front_end/models/issues_manager/descriptions/permissionElementFontSizeTooLarge.md +2 -2
  166. package/front_end/models/issues_manager/descriptions/permissionElementFontSizeTooSmall.md +2 -2
  167. package/front_end/models/issues_manager/descriptions/permissionElementInsetBoxShadowUnsupported.md +1 -1
  168. package/front_end/models/issues_manager/descriptions/permissionElementInvalidDisplayStyle.md +2 -2
  169. package/front_end/models/issues_manager/descriptions/permissionElementInvalidSizeValue.md +2 -2
  170. package/front_end/models/issues_manager/descriptions/permissionElementInvalidType.md +2 -2
  171. package/front_end/models/issues_manager/descriptions/permissionElementInvalidTypeActivation.md +2 -2
  172. package/front_end/models/issues_manager/descriptions/permissionElementNonOpaqueColor.md +1 -1
  173. package/front_end/models/issues_manager/descriptions/permissionElementPaddingBottomUnsupported.md +2 -2
  174. package/front_end/models/issues_manager/descriptions/permissionElementPaddingRightUnsupported.md +2 -2
  175. package/front_end/models/issues_manager/descriptions/permissionElementRequestInProgress.md +2 -2
  176. package/front_end/models/issues_manager/descriptions/permissionElementSecurityChecksFailed.md +1 -1
  177. package/front_end/models/issues_manager/descriptions/permissionElementTypeNotSupported.md +2 -2
  178. package/front_end/models/issues_manager/descriptions/permissionElementUntrustedEvent.md +1 -1
  179. package/front_end/models/issues_manager/descriptions/placeholderDescriptionForInvisibleIssues.md +1 -1
  180. package/front_end/models/issues_manager/descriptions/selectElementAccessibilityDisallowedOptGroupChild.md +1 -1
  181. package/front_end/models/issues_manager/descriptions/selectElementAccessibilityDisallowedSelectChild.md +1 -1
  182. package/front_end/models/issues_manager/descriptions/selectElementAccessibilityInteractiveContentAttributesSelectDescendant.md +1 -1
  183. package/front_end/models/issues_manager/descriptions/selectElementAccessibilityInteractiveContentLegendChild.md +1 -1
  184. package/front_end/models/issues_manager/descriptions/selectElementAccessibilityInteractiveContentOptionChild.md +1 -1
  185. package/front_end/models/issues_manager/descriptions/selectElementAccessibilityNonPhrasingContentOptionChild.md +1 -1
  186. package/front_end/models/issues_manager/descriptions/selectivePermissionsIntervention.md +3 -3
  187. package/front_end/models/issues_manager/descriptions/sharedArrayBuffer.md +1 -1
  188. package/front_end/models/issues_manager/descriptions/sharedDictionaryUseErrorCrossOriginNoCorsRequest.md +1 -1
  189. package/front_end/models/issues_manager/descriptions/sharedDictionaryUseErrorMatchingDictionaryNotUsed.md +1 -1
  190. package/front_end/models/issues_manager/descriptions/sharedDictionaryUseErrorUnexpectedContentDictionaryHeader.md +1 -1
  191. package/front_end/models/issues_manager/descriptions/sharedDictionaryWriteErrorCossOriginNoCorsRequest.md +1 -1
  192. package/front_end/models/issues_manager/descriptions/sharedDictionaryWriteErrorDisallowedBySettings.md +1 -1
  193. package/front_end/models/issues_manager/descriptions/sharedDictionaryWriteErrorExpiredResponse.md +1 -1
  194. package/front_end/models/issues_manager/descriptions/sharedDictionaryWriteErrorFeatureDisabled.md +2 -2
  195. package/front_end/models/issues_manager/descriptions/sharedDictionaryWriteErrorInvalidStructuredHeader.md +1 -1
  196. package/front_end/models/issues_manager/descriptions/sharedDictionaryWriteErrorNavigationRequest.md +2 -2
  197. package/front_end/models/issues_manager/descriptions/sriInvalidSignatureHeader.md +4 -4
  198. package/front_end/models/issues_manager/descriptions/sriInvalidSignatureInputHeader.md +4 -4
  199. package/front_end/models/issues_manager/descriptions/sriMissingSignatureHeader.md +1 -1
  200. package/front_end/models/issues_manager/descriptions/sriMissingSignatureInputHeader.md +2 -2
  201. package/front_end/models/issues_manager/descriptions/sriSignatureHeaderValueIsIncorrectLength.md +2 -2
  202. package/front_end/models/issues_manager/descriptions/sriSignatureHeaderValueIsNotByteSequence.md +4 -4
  203. package/front_end/models/issues_manager/descriptions/sriSignatureHeaderValueIsParameterized.md +4 -4
  204. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderInvalidComponentName.md +1 -1
  205. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderInvalidComponentType.md +2 -2
  206. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderInvalidDerivedComponentParameter.md +1 -1
  207. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderInvalidHeaderComponentParameter.md +1 -1
  208. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderInvalidParameter.md +2 -2
  209. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderKeyIdLength.md +5 -5
  210. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderMissingLabel.md +3 -3
  211. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderMissingRequiredParameters.md +2 -2
  212. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderValueMissingComponents.md +2 -2
  213. package/front_end/models/issues_manager/descriptions/sriSignatureInputHeaderValueNotInnerList.md +2 -2
  214. package/front_end/models/issues_manager/descriptions/sriValidationFailedIntegrityMismatch.md +4 -4
  215. package/front_end/models/issues_manager/descriptions/sriValidationFailedInvalidLength.md +3 -3
  216. package/front_end/models/issues_manager/descriptions/sriValidationFailedSignatureExpired.md +2 -2
  217. package/front_end/models/issues_manager/descriptions/sriValidationFailedSignatureMismatch.md +2 -2
  218. package/front_end/models/issues_manager/descriptions/stylesheetLateImport.md +1 -1
  219. package/front_end/models/issues_manager/descriptions/summaryElementAccessibilityInteractiveContentSummaryDescendant.md +1 -1
  220. package/front_end/models/issues_manager/descriptions/unencodedDigestIncorrectDigestLength.md +2 -2
  221. package/front_end/models/issues_manager/descriptions/unencodedDigestIncorrectDigestType.md +3 -3
  222. package/front_end/models/issues_manager/descriptions/unencodedDigestMalformedDictionary.md +2 -2
  223. package/front_end/models/issues_manager/descriptions/unencodedDigestUnknownAlgorithm.md +1 -1
  224. package/front_end/panels/application/DOMStorageItemsView.ts +1 -2
  225. package/front_end/panels/application/KeyValueStorageItemsView.ts +12 -0
  226. package/front_end/panels/elements/StylePropertiesSection.ts +25 -9
  227. package/front_end/panels/elements/StylesSidebarPane.ts +48 -0
  228. package/front_end/panels/emulation/DeviceModeToolbar.ts +0 -1
  229. package/front_end/panels/emulation/DeviceModeView.ts +289 -164
  230. package/front_end/panels/emulation/MediaQueryInspector.ts +10 -6
  231. package/front_end/panels/emulation/deviceModeView.css +1 -0
  232. package/front_end/panels/lighthouse/LighthouseController.ts +1 -6
  233. package/front_end/panels/sources/breakpointEditDialog.css +2 -2
  234. package/front_end/third_party/chromium/README.chromium +1 -1
  235. package/front_end/ui/components/text_editor/AiCodeGenerationProvider.ts +1 -2
  236. package/package.json +1 -2
  237. package/front_end/models/issues_manager/descriptions/SameSiteExcludeContextDowngradeRead.md +0 -8
  238. package/front_end/models/issues_manager/descriptions/SameSiteExcludeContextDowngradeSet.md +0 -8
  239. package/front_end/models/issues_manager/descriptions/SameSiteExcludeNavigationContextDowngrade.md +0 -8
  240. package/front_end/models/issues_manager/descriptions/SameSiteWarnCrossDowngradeRead.md +0 -8
  241. package/front_end/models/issues_manager/descriptions/SameSiteWarnCrossDowngradeSet.md +0 -8
  242. package/front_end/models/issues_manager/descriptions/SameSiteWarnStrictLaxDowngradeStrict.md +0 -8
@@ -2,4 +2,4 @@
2
2
 
3
3
  Low-contrast text is difficult or impossible for users to read. A [minimum contrast ratio (AA) of 4.5](issuesContrastWCAG21AA) is recommended for all text. Since font size and weight affect color perception, an exception is made for very large or bold text — in this case, a contrast ratio of 3.0 is allowed. The [enhanced conformance level (AAA)](issuesContrastWCAG21AAA) requires the contrast ratio to be above 7.0 for regular text and 4.5 for large text.
4
4
 
5
- Update colors or change the font size or weight to achieve sufficient contrast. You can use the [“Suggest color” feature](issuesContrastSuggestColor) in the DevTools color picker to automatically select a better text color.
5
+ Update colors or change the font size or weight to achieve sufficient contrast. You can use the [“Suggest color” feature](issuesContrastSuggestColor) in the DevTools color picker to automatically select a better text color.
@@ -5,4 +5,4 @@ This behavior protects user data from being sent over an insecure connection.
5
5
 
6
6
  Resolve this issue by updating the attributes of the cookie:
7
7
  * Specify `SameSite=None` and `Secure` if the cookie should be sent in cross-site requests. This enables third-party use.
8
- * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie should not be sent in cross-site requests.
8
+ * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie shouldn’t be sent in cross-site requests.
@@ -5,4 +5,4 @@ This behavior protects user data from being sent over an insecure connection.
5
5
 
6
6
  Resolve this issue by updating the attributes of the cookie:
7
7
  * Specify `SameSite=None` and `Secure` if the cookie is intended to be set in cross-site contexts. Note that only cookies sent over HTTPS may use the `Secure` attribute.
8
- * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie should not be set by cross-site requests.
8
+ * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie shouldn’t be set by cross-site requests.
@@ -5,4 +5,4 @@ This behavior protects user data from being sent over an insecure connection.
5
5
 
6
6
  Resolve this issue by updating the attributes of the cookie:
7
7
  * Specify `SameSite=None` and `Secure` if the cookie should be sent in cross-site requests. This enables third-party use.
8
- * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie should not be sent in cross-site requests.
8
+ * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie shouldn’t be sent in cross-site requests.
@@ -5,4 +5,4 @@ This behavior protects user data from being sent over an insecure connection.
5
5
 
6
6
  Resolve this issue by updating the attributes of the cookie:
7
7
  * Specify `SameSite=None` and `Secure` if the cookie is intended to be set in cross-site contexts. Note that only cookies sent over HTTPS may use the `Secure` attribute.
8
- * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie should not be set by cross-site requests.
8
+ * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie shouldn’t be set by cross-site requests.
@@ -1,9 +1,9 @@
1
1
  # Indicate whether to send a cookie in a cross-site request by specifying its SameSite attribute
2
2
 
3
- Because a cookie’s `SameSite` attribute was not set or is invalid, it defaults to `SameSite=Lax`,
4
- which will prevent the cookie from being sent in a cross-site request in a future version of the browser.
3
+ Because a cookie’s `SameSite` attribute wasn’t set or is invalid, it defaults to `SameSite=Lax`,
4
+ which will stop the cookie from being sent in a cross-site request in a future version of the browser.
5
5
  This behavior protects user data from accidentally leaking to third parties and cross-site request forgery.
6
6
 
7
7
  Resolve this issue by updating the attributes of the cookie:
8
8
  * Specify `SameSite=None` and `Secure` if the cookie should be sent in cross-site requests. This enables third-party use.
9
- * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie should not be sent in cross-site requests.
9
+ * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie shouldn’t be sent in cross-site requests.
@@ -1,9 +1,9 @@
1
1
  # Indicate whether a cookie is intended to be set in cross-site context by specifying its SameSite attribute
2
2
 
3
- Because a cookie’s `SameSite` attribute was not set or is invalid, it defaults to `SameSite=Lax`,
4
- which will prevents the cookie from being set in a cross-site context in a future version of the browser.
3
+ Because a cookie’s `SameSite` attribute wasn’t set or is invalid, it defaults to `SameSite=Lax`,
4
+ which will stops the cookie from being set in a cross-site context in a future version of the browser.
5
5
  This behavior protects user data from accidentally leaking to third parties and cross-site request forgery.
6
6
 
7
7
  Resolve this issue by updating the attributes of the cookie:
8
8
  * Specify `SameSite=None` and `Secure` if the cookie is intended to be set in cross-site contexts. Note that only cookies sent over HTTPS may use the `Secure` attribute.
9
- * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie should not be set by cross-site requests.
9
+ * Specify `SameSite=Strict` or `SameSite=Lax` if the cookie shouldn’t be set by cross-site requests.
@@ -1,3 +1,3 @@
1
1
  # Chrome may soon delete state for intermediate websites in a recent navigation chain
2
2
 
3
- In a recent navigation chain, one or more websites without prior user interaction were visited. If these websites don't get such an interaction soon, Chrome will delete their state.
3
+ In a recent navigation chain, one or more websites without prior user interaction were visited. If these websites dont get such an interaction soon, Chrome will delete their state.
@@ -1,6 +1,6 @@
1
- # An item in the `Connection-Allowlist` header is invalid.
1
+ # An item in the `Connection-Allowlist` header is invalid
2
2
 
3
- Each item in the `Connection-Allowlist`'s header's [Inner List](sfInnerList)
3
+ Each item in the `Connection-Allowlist`’s headers [Inner List](sfInnerList)
4
4
  must be a [String](sfString) representing a [URL Pattern](urlPatternSpec), or
5
5
  the [Token](sfToken) `response-origin`.
6
6
 
@@ -1,6 +1,6 @@
1
- # The `Connection-Allowlist` header is not formatted as a Structured Field List.
1
+ # The `Connection-Allowlist` header isn’t formatted as a Structured Field List
2
2
 
3
- Responses' `Connection-Allowlist` header should be formatted as a [List](sfList)
3
+ Responses `Connection-Allowlist` header should be formatted as a [List](sfList)
4
4
  containing a single [Inner List](sfInnerList) that declares the allowed set of
5
5
  [URL Patterns](urlPatternSpec) for a given context.
6
6
 
@@ -1,8 +1,8 @@
1
- # An item in the `Connection-Allowlist` header is not a valid URL pattern.
1
+ # An item in the `Connection-Allowlist` header isn’t a valid URL pattern
2
2
 
3
3
  Each item in the `Connection-Allowlist` header must be a valid
4
- [URL Pattern](urlPatternSpec) that can be used to match against the request's
4
+ [URL Pattern](urlPatternSpec) that can be used to match against the requests
5
5
  origin.
6
6
 
7
- Note that our current implementation does not allow regular expressions to be
7
+ Note that our current implementation doesn’t allow regular expressions to be
8
8
  used as part of the pattern.
@@ -1,6 +1,6 @@
1
- # An item in the `Connection-Allowlist` header is not an Inner List.
1
+ # An item in the `Connection-Allowlist` header isn’t an Inner List
2
2
 
3
- Responses' `Connection-Allowlist` header should be formatted as a [List](sfList)
3
+ Responses `Connection-Allowlist` header should be formatted as a [List](sfList)
4
4
  containing a single [Inner List](sfInnerList) that declares the allowed set of
5
5
  [URL Patterns](urlPatternSpec) for a given context.
6
6
 
@@ -1,6 +1,6 @@
1
- # `Connection-Allowlist` has multiple items.
1
+ # `Connection-Allowlist` has multiple items
2
2
 
3
- Responses' `Connection-Allowlist` header should be formatted as a [List](sfList)
3
+ Responses `Connection-Allowlist` header should be formatted as a [List](sfList)
4
4
  containing a single [Inner List](sfInnerList) that declares the allowed set of
5
5
  [URL Patterns](urlPatternSpec) for a given context. This response was a
6
6
  [List](sfList) containing more than one item: all but the first have been
@@ -1,4 +1,4 @@
1
- # The `report-to` parameter in the `Connection-Allowlist` header is not a token.
1
+ # The `report-to` parameter in the `Connection-Allowlist` header isn’t a token
2
2
 
3
3
  If provided, the `report-to` parameter must be a [Token](sfToken)
4
4
  naming a reporting endpoint.
@@ -1,6 +1,6 @@
1
1
  # Cookie is blocked due to a cross-site redirect chain
2
2
 
3
- The cookie was blocked because the URL redirect chain was not fully same-site,
3
+ The cookie was blocked because the URL redirect chain wasn’t fully same-site,
4
4
  meaning the final request was treated as a cross-site request.
5
5
  Like other cross-site requests, this blocks cookies with `SameSite=Lax` or
6
6
  `SameSite=Strict`.
@@ -8,5 +8,5 @@ Like other cross-site requests, this blocks cookies with `SameSite=Lax` or
8
8
  For example: If site A redirects to site B which then redirects back to site A,
9
9
  the final request to site A will be a cross-site request.
10
10
 
11
- If this behavior is causing breakage, please file a bug report with the link
12
- below.
11
+ If this behavior is causing breakage, file a bug report with the link
12
+ below.
@@ -1,4 +1,4 @@
1
1
  # Third-party cookie blocked within the same Related Website Set
2
2
 
3
- A cookie embedded by a site in the top-level page's Related Website Set was blocked
3
+ A cookie embedded by a site in the top-level pages Related Website Set was blocked
4
4
  by third-party cookie blocking.
@@ -1,4 +1,4 @@
1
- # Cookie was not sent due to port mismatch
1
+ # Cookie wasn’t sent due to port mismatch
2
2
 
3
3
  Cookies can only be accessed by origins that share the same port as the origin
4
4
  that initially set the cookie.
@@ -1,4 +1,4 @@
1
- # Cookie was not sent due to scheme mismatch
1
+ # Cookie wasn’t sent due to scheme mismatch
2
2
 
3
3
  The cookie can only be accessed by origins that share the same scheme as
4
4
  the origin that initially set it.
@@ -3,4 +3,4 @@
3
3
  Cookies with the `SameSite=None; Secure` and not `Partitioned` attributes that operate in cross-site contexts are third-party cookies.
4
4
  Third-party cookies are restricted for this browser either because of Chrome flags or browser configuration.
5
5
 
6
- Learn more from the linked article about preparing your site to avoid potential breakage due to this.
6
+ Learn more from the linked article about preparing your site to avoid potential breakage due to this.
@@ -3,4 +3,4 @@
3
3
  Cookies with the `SameSite=None; Secure` and not `Partitioned` attributes that operate in cross-site contexts are third-party cookies.
4
4
  Chrome is moving towards a new experience that allows users to choose to browse without third-party cookies.
5
5
 
6
- Learn more from the linked article about preparing your site to avoid potential breakage.
6
+ Learn more from the linked article about preparing your site to avoid potential breakage.
@@ -1,6 +1,6 @@
1
1
  # Ensure CORS requests include credentials only when allowed
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because it was configured to include credentials but the `Access-Control-Allow-Credentials` response header of the request or the associated preflight request was not set to `true`.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because it was configured to include credentials but the `Access-Control-Allow-Credentials` response header of the request or the associated preflight request wasn’t set to `true`.
4
4
 
5
5
  To fix this issue, ensure that resources that expect credentialed CORS requests set the `Access-Control-Allow-Credentials` header to `true`.
6
6
  Note that this requires the `Access-Control-Allow-Origin` header to not be a wildcard `*`.
@@ -1,7 +1,7 @@
1
1
  # Ensure CORS requests are made on supported schemes
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because the scheme of the request's URL doesn't support CORS.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because the scheme of the requests URL doesnt support CORS.
4
4
 
5
5
  To fix this issue, ensure all CORS request URLs specify a supported scheme, e.g. most commonly https://.
6
6
 
7
- Note that if an opaque response is sufficient, then for some schemes the request's mode can be set to `no-cors` to fetch the resource with CORS disabled; that way the scheme doesn't need to support CORS, but the response content is inaccessible (opaque).
7
+ Note that if an opaque response is sufficient, then for some schemes the requests mode can be set to `no-cors` to fetch the resource with CORS disabled; that way the scheme doesnt need to support CORS, but the response content is inaccessible (opaque).
@@ -1,7 +1,7 @@
1
1
  # Ensure only same-origin resources are fetched with same-origin request mode
2
2
 
3
- A cross-origin resource sharing (CORS) request to a cross-origin resource was blocked because the request mode was set to `same-origin`.
3
+ A Cross-Origin Resource Sharing (CORS) request to a cross-origin resource was blocked because the request mode was set to `same-origin`.
4
4
 
5
5
  To fix this issue, ensure that only same-origin resources are fetched with the `same-origin` request mode. If you need to fetch a cross-origin resource, use a request mode such as `cors`.
6
6
 
7
- Note that if an opaque response is sufficient, the request's mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers are not required but the response content is inaccessible (opaque).
7
+ Note that if an opaque response is sufficient, the requests mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers aren’t required but the response content is inaccessible (opaque).
@@ -1,5 +1,5 @@
1
1
  # Ensure CORS request includes only allowed headers
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because it contained request headers that were neither CORS-safelisted (`Accept`, `Accept-Language`, `Content-Language`, `Content-Type`) nor allowed by the `Access-Control-Allow-Headers` response header of the associated preflight request.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because it contained request headers that were neither CORS-safelisted (`Accept`, `Accept-Language`, `Content-Language`, `Content-Type`) nor allowed by the `Access-Control-Allow-Headers` response header of the associated preflight request.
4
4
 
5
5
  To fix this issue, include the additional request headers you want to use in the `Access-Control-Allow-Headers` response header of the associated preflight request.
@@ -1,7 +1,7 @@
1
1
  # Ensure CORS response header values are valid
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because of invalid or missing response headers of the request or the associated [preflight request](issueCorsPreflightRequest).
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because of invalid or missing response headers of the request or the associated [preflight request](issueCorsPreflightRequest).
4
4
 
5
- To fix this issue, ensure the response to the CORS request and/or the associated [preflight request](issueCorsPreflightRequest) are not missing headers and use valid header values.
5
+ To fix this issue, ensure the response to the CORS request and/or the associated [preflight request](issueCorsPreflightRequest) aren’t missing headers and use valid header values.
6
6
 
7
- Note that if an opaque response is sufficient, the request's mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers are not required but the response content is inaccessible (opaque).
7
+ Note that if an opaque response is sufficient, the requests mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers aren’t required but the response content is inaccessible (opaque).
@@ -1,7 +1,7 @@
1
1
  # Ensure that local network requests are compatible with restrictions
2
2
 
3
3
  A site requested a resource from a network that it could only access because of
4
- its users' privileged network position.
4
+ its users privileged network position.
5
5
 
6
6
  These requests expose devices and servers to the internet, increasing the risk
7
7
  of a cross-site request forgery (CSRF) attack and/or information leakage.
@@ -1,5 +1,5 @@
1
1
  # Ensure CORS request uses allowed method
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because it neither uses one of the CORS-safelisted methods (`GET`, `HEAD`, `POST`) nor was the request method explicitly allowed by the `Access-Control-Allow-Methods` response header of the associated [preflight request](issueCorsPreflightRequest).
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because it neither uses one of the CORS-safelisted methods (`GET`, `HEAD`, `POST`) nor was the request method explicitly allowed by the `Access-Control-Allow-Methods` response header of the associated [preflight request](issueCorsPreflightRequest).
4
4
 
5
5
  To fix this issue, include the request method in the `Access-Control-Allow-Methods` header of the associated preflight request.
@@ -1,5 +1,5 @@
1
1
  # Ensure no-cors requests configure redirect mode follow
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because it was configured to use request mode `no-cors` but did not use the redirect mode `follow`.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because it was configured to use request mode `no-cors` but did not use the redirect mode `follow`.
4
4
 
5
5
  To fix this issue, ensure that whenever the request mode `no-cors` is set then the redirect mode is set to `follow`.
@@ -1,6 +1,6 @@
1
- # Ensure CORS requesting origin matches resource's allowed origin
1
+ # Ensure CORS requesting origin matches resources allowed origin
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because the `Access-Control-Allow-Origin` response header of the request or the associated [preflight request](issueCorsPreflightRequest) specified an origin different from the origin of the context that initiated the request.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because the `Access-Control-Allow-Origin` response header of the request or the associated [preflight request](issueCorsPreflightRequest) specified an origin different from the origin of the context that initiated the request.
4
4
 
5
- To fix this issue, ensure that the `Access-Control-Allow-Origin` header for the resource matches the request context's origin.
5
+ To fix this issue, ensure that the `Access-Control-Allow-Origin` header for the resource matches the request contexts origin.
6
6
  If the resource never needs to be accessed with credentials, the `Access-Control-Allow-Origin` header may be set to a wildcard `*` to allow access from everywhere.
@@ -1,5 +1,5 @@
1
1
  # Ensure preflight responses are valid
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because the response to the associated [preflight request](issueCorsPreflightRequest) failed, had an unsuccessful HTTP status code, and/or was a redirect.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because the response to the associated [preflight request](issueCorsPreflightRequest) failed, had an unsuccessful HTTP status code, and/or was a redirect.
4
4
 
5
- To fix this issue, ensure all CORS preflight `OPTIONS` requests are answered with a successful HTTP status code (2xx) and do not redirect.
5
+ To fix this issue, ensure all CORS preflight `OPTIONS` requests are answered with a successful HTTP status code (2xx) and don’t redirect.
@@ -1,5 +1,5 @@
1
- # Ensure CORS requests are not redirected to URLs containing credentials
1
+ # Ensure CORS requests aren’t redirected to URLs containing credentials
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because the response was a redirect to a URL that includes credentials, i.e. redirected to a URL of the form `https://username:password@example.com`.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because the response was a redirect to a URL that includes credentials, i.e. redirected to a URL of the form `https://username:password@example.com`.
4
4
 
5
- To fix this issue, ensure CORS requests are not redirected to URLs that include credentials.
5
+ To fix this issue, ensure CORS requests aren’t redirected to URLs that include credentials.
@@ -1,8 +1,9 @@
1
- # Ensure credentialed requests are not sent to CORS resources with origin wildcards
1
+ # Ensure credentialed requests aren’t sent to CORS resources with origin wildcards
2
2
 
3
- A cross-origin resource sharing (CORS) request was blocked because it was configured to `include` credentials and the `Access-Control-Allow-Origin` response header of the request or the associated [preflight request](issueCorsPreflightRequest) was set to a wildcard `*`. CORS requests may only include credentials for resources where the `Access-Control-Allow-Origin` header is not a wildcard.
3
+ A Cross-Origin Resource Sharing (CORS) request was blocked because it was configured to `include` credentials and the `Access-Control-Allow-Origin` response header of the request or the associated [preflight request](issueCorsPreflightRequest) was set to a wildcard `*`. CORS requests may only include credentials for resources where the `Access-Control-Allow-Origin` header isn’t a wildcard.
4
4
 
5
5
  To fix this issue, ensure that either the request is configured to not include credentials, or change the `Access-Control-Allow-Origin` header of the resource to not be a wildcard.
6
6
 
7
- Note that if an opaque response is sufficient, the request's mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers are not required but credentials are not sent and the response content is inaccessible (opaque).
7
+ Note that if an opaque response is sufficient, the requests mode can be set to `no-cors` to fetch the resource with CORS disabled; that way CORS headers aren’t required but credentials aren’t sent and the response content is inaccessible (opaque).
8
+
8
9
 
@@ -1,9 +1,9 @@
1
- # Content Security Policy of your site blocks the use of 'eval' in JavaScript`
1
+ # Content Security Policy of your site blocks the use of `eval` in JavaScript
2
2
 
3
- The Content Security Policy (CSP) prevents the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unathorized code on your site.
3
+ The Content Security Policy (CSP) stops the evaluation of arbitrary strings as JavaScript to make it more difficult for an attacker to inject unauthorized code on your site.
4
4
 
5
- To solve this issue, avoid using `eval()`, `new Function()`, `setTimeout([string], ...)` and `setInterval([string], ...)` for evaluating strings.
5
+ To solve this issue, avoid using `eval()`, `new Function()`, `setTimeout([string], )` and `setInterval([string], )` for evaluating strings.
6
6
 
7
7
  If you absolutely must: you can enable string evaluation by adding `unsafe-eval` as an allowed source in a `script-src` directive.
8
8
 
9
- ⚠️ Allowing string evaluation comes at the risk of inline script injection.
9
+ ⚠️ Allowing string evaluation comes at the risk of inline script injection.
@@ -1,10 +1,10 @@
1
1
  # Content Security Policy blocks inline execution of scripts and stylesheets
2
2
 
3
- The Content Security Policy (CSP) prevents cross-site scripting attacks by blocking inline execution of scripts and style sheets.
3
+ The Content Security Policy (CSP) stops cross-site scripting attacks by blocking inline execution of scripts and style sheets.
4
4
 
5
5
  To solve this, move all inline scripts (e.g. `onclick=[JS code]`) and styles into external files.
6
6
 
7
7
  ⚠️ Allowing inline execution comes at the risk of script injection via injection of HTML script elements. If you absolutely must, you can allow inline script and styles by:
8
8
 
9
9
  * adding `unsafe-inline` as a source to the CSP header
10
- * adding the hash or nonce of the inline script to your CSP header.
10
+ * adding the hash or nonce of the inline script to your CSP header.
@@ -1,5 +1,5 @@
1
1
  # Trusted Type policy creation blocked by Content Security Policy
2
2
 
3
- Your site tries to create a Trusted Type policy that has not been allowed by the Content Security Policy. The Content Security Policy may restrict the set of valid names for Trusted Type policies, and forbid more than one policy of each name.
3
+ Your site tries to create a Trusted Type policy that hasn’t been allowed by the Content Security Policy. The Content Security Policy may restrict the set of valid names for Trusted Type policies, and forbid more than one policy of each name.
4
4
 
5
- To solve this, make sure that the names of the policies listed below are declared in the `trusted-types` CSP directive. To allow redefining policies add the `allow-duplicates` keyword. If you want to remove all restrictions on policy names, remove the `trusted-types` directive entirely (not recommended).
5
+ To solve this, make sure that the names of the policies listed below are declared in the `trusted-types` CSP directive. To allow redefining policies add the `allow-duplicates` keyword. If you want to remove all restrictions on policy names, remove the `trusted-types` directive entirely (not recommended).
@@ -1,8 +1,8 @@
1
- # Trusted Type expected, but String received
1
+ # Trusted Type expected, but got String
2
2
 
3
- Your site tries to use a plain string in a DOM modification where a Trusted Type is expected. Requiring Trusted Types for DOM modifications helps to prevent cross-site scripting attacks.
3
+ Your site tries to use a plain string in a DOM change where a Trusted Type is expected. Requiring Trusted Types for DOM changes helps to stop cross-site scripting attacks.
4
4
 
5
- To solve this, provide a Trusted Type to all the DOM modifications listed below. You can convert a string into a Trusted Type by:
5
+ To solve this, provide a Trusted Type to all the DOM changes listed below. You can convert a string into a Trusted Type by:
6
6
 
7
7
  * defining a policy and using its corresponding `createHTML`, `createScript` or `createScriptURL` function.
8
- * defining a policy named `default` which will be automatically called.
8
+ * defining a policy named `default` which will be automatically called.
@@ -1,10 +1,10 @@
1
1
  # Content Security Policy of your site blocks some resources
2
2
 
3
- Some resources are blocked because their origin is not listed in your site's Content Security Policy (CSP). Your site's CSP is allowlist-based, so resources must be listed in the allowlist in order to be accessed.
3
+ Some resources are blocked because their origin isn’t listed in your sites Content Security Policy (CSP). Your sites CSP is allowlist-based, so resources must be listed in the allowlist to be accessed.
4
4
 
5
- A site's Content Security Policy is set either via an HTTP header (recommended), or via a meta HTML tag.
5
+ A sites Content Security Policy is set either via an HTTP header (recommended), or via a meta HTML tag.
6
6
 
7
7
  To fix this issue do one of the following:
8
8
 
9
- * (Recommended) If you're using an allowlist for `'script-src'`, consider switching from an allowlist CSP to a strict CSP, because strict CSPs are [more robust against XSS](issuesCSPWhyStrictOverAllowlist). [See how to set a strict CSP](issuesCSPSetStrict).
10
- * Or carefully check that all of the blocked resources are trustworthy; if they are, include their sources in the CSP of your site. ⚠️Never add a source you don't trust to your site's CSP. If you don't trust the source, consider hosting resources on your own site instead.
9
+ * (Recommended) If youre using an allowlist for `'script-src'`, consider switching from an allowlist CSP to a strict CSP, because strict CSPs are [more robust against XSS](issuesCSPWhyStrictOverAllowlist). [See how to set a strict CSP](issuesCSPSetStrict).
10
+ * Or carefully check that all of the blocked resources are trustworthy; if they are, include their sources in the CSP of your site. ⚠️Never add a source you dont trust to your sites CSP. If you dont trust the source, consider hosting resources on your own site instead.
@@ -1 +1 @@
1
- # Email verification request failed because the accounts endpoint returned an empty list of accounts.
1
+ # Email verification request failed because the accounts endpoint returned an empty list of accounts
@@ -1 +1 @@
1
- # Email verification request failed because the accounts endpoint was not found (HTTP 404).
1
+ # Email verification request failed because the accounts endpoint wasn’t found (HTTP 404)
@@ -1 +1 @@
1
- # Email verification request failed because the accounts endpoint returned an invalid Content-Type.
1
+ # Email verification request failed because the accounts endpoint returned an invalid Content-Type
@@ -1 +1 @@
1
- # Email verification request failed because the accounts endpoint returned an invalid response.
1
+ # Email verification request failed because the accounts endpoint returned an invalid response
@@ -1 +1 @@
1
- # Email verification request failed because the accounts endpoint did not respond.
1
+ # Email verification request failed because the accounts endpoint did not respond
@@ -1 +1 @@
1
- # Email verification request failed because the DNS fetch failed.
1
+ # Email verification request failed because the DNS fetch failed
@@ -1 +1 @@
1
- # Email verification request failed because the DNS record is invalid.
1
+ # Email verification request failed because the DNS record is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the email verification well-known file was not found (HTTP 404).
1
+ # Email verification request failed because the email verification well-known file wasn’t found (HTTP 404)
@@ -1 +1 @@
1
- # Email verification request failed because the email verification well-known file returned an invalid Content-Type.
1
+ # Email verification request failed because the email verification well-known file returned an invalid Content-Type
@@ -1 +1 @@
1
- # Email verification request failed because the email verification well-known file returned an invalid response.
1
+ # Email verification request failed because the email verification well-known file returned an invalid response
@@ -1 +1 @@
1
- # Email verification request failed because the email verification well-known file did not respond.
1
+ # Email verification request failed because the email verification well-known file did not respond
@@ -1 +1 @@
1
- # Email verification request failed because the email address is invalid.
1
+ # Email verification request failed because the email address is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the JWKS endpoint was not found (HTTP 404).
1
+ # Email verification request failed because the JWKS endpoint wasn’t found (HTTP 404)
@@ -1 +1 @@
1
- # Email verification request failed because the JWKS endpoint returned an invalid response.
1
+ # Email verification request failed because the JWKS endpoint returned an invalid response
@@ -1 +1 @@
1
- # Email verification request failed because key binding signing failed.
1
+ # Email verification request failed because key binding signing failed
@@ -1 +1 @@
1
- # Email verification request failed because the Relying Party origin is opaque.
1
+ # Email verification request failed because the Relying Party origin is opaque
@@ -1 +1 @@
1
- # Email verification request failed because the token endpoint was not found (HTTP 404).
1
+ # Email verification request failed because the token endpoint wasn’t found (HTTP 404)
@@ -1 +1 @@
1
- # Email verification request failed because the token endpoint had an invalid Content-Type.
1
+ # Email verification request failed because the token endpoint had an invalid Content-Type
@@ -1 +1 @@
1
- # Email verification request failed because the token endpoint response was invalid.
1
+ # Email verification request failed because the token endpoint response was invalid
@@ -1 +1 @@
1
- # Email verification request failed because the token endpoint returned an invalid SD-JWT.
1
+ # Email verification request failed because the token endpoint returned an invalid SD-JWT
@@ -1 +1 @@
1
- # Email verification request failed because the token endpoint returned a malformed SD-JWT.
1
+ # Email verification request failed because the token endpoint returned a malformed SD-JWT
@@ -1 +1 @@
1
- # Email verification request failed because there was no response from the token endpoint.
1
+ # Email verification request failed because there was no response from the token endpoint
@@ -1 +1 @@
1
- # Email verification request failed because the key binding audience claim is invalid.
1
+ # Email verification request failed because the key binding audience claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the key binding issued at claim is invalid.
1
+ # Email verification request failed because the key binding issued at claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the key binding nonce claim is invalid.
1
+ # Email verification request failed because the key binding nonce claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the key binding SD hash claim is invalid.
1
+ # Email verification request failed because the key binding SD hash claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the key binding type header is invalid.
1
+ # Email verification request failed because the key binding type header is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the key binding audience claim is missing.
1
+ # Email verification request failed because the key binding audience claim is missing
@@ -1 +1 @@
1
- # Email verification request failed because the key binding confirmation claim is missing.
1
+ # Email verification request failed because the key binding confirmation claim is missing
@@ -1 +1 @@
1
- # Email verification request failed because the key binding issued at claim is missing.
1
+ # Email verification request failed because the key binding issued at claim is missing
@@ -1 +1 @@
1
- # Email verification request failed because the key binding nonce claim is missing.
1
+ # Email verification request failed because the key binding nonce claim is missing
@@ -1 +1 @@
1
- # Email verification request failed because the key binding SD hash claim is missing.
1
+ # Email verification request failed because the key binding SD hash claim is missing
@@ -1 +1 @@
1
- # Email verification request failed because the key binding signature verification failed.
1
+ # Email verification request failed because the key binding signature verification failed
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT email claim is invalid.
1
+ # Email verification request failed because the SD-JWT email claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT email verified claim is invalid.
1
+ # Email verification request failed because the SD-JWT email verified claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT holder key is invalid.
1
+ # Email verification request failed because the SD-JWT holder key is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT issued at claim is invalid.
1
+ # Email verification request failed because the SD-JWT issued at claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT issuer claim is invalid.
1
+ # Email verification request failed because the SD-JWT issuer claim is invalid
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT JWKS is missing keys.
1
+ # Email verification request failed because the SD-JWT JWKS is missing keys
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT confirmation claim is missing.
1
+ # Email verification request failed because the SD-JWT confirmation claim is missing
@@ -1 +1 @@
1
- # Email verification request failed because the SD-JWT email claim is missing.
1
+ # Email verification request failed because the SD-JWT email claim is missing