HTMLIFrameElement.referrerPolicy - Web APIs
the htmliframeelement.referrerpolicy property reflects the html referrerpolicy attribute of the <iframe> element defining which referrer is sent when fetching the resource.
... the htmliframeelement.referrerpolicy property reflects the html referrerpolicy attribute of the <iframe> element defining which referrer is sent when fetching the resource.
... the htmliframeelement.referrerpolicy property reflects the html referrerpolicy attribute of the <iframe> element defining which referrer is sent when fetching the resource.
...And 8 more matches

RTCConfiguration.iceTransportPolicy - Web APIs
the webrtc device api dictionary rtcconfiguration's icetransportpolicy property is a string indicating the transport selection policy the ice agent should use during negotiation of connections.
... the webrtc device api dictionary rtcconfiguration's icetransportpolicy property is a string indicating the transport selection policy the ice agent should use during negotiation of connections.
...he webrtc device api dictionary rtcconfiguration's icetransportpolicy property is a string indicating the transport selection policy the ice agent should use during negotiation of connections.
...And 8 more matches

Cross-Origin Resource Policy (CORP) - HTTP
cross-origin resource policy is a policy set by the cross-origin-resource-policy http header that lets web sites and applications opt in to protection against certain requests from other origins (such as those issued with elements like <script> and <img>), to mitigate speculative side-channel attacks, like spectre, as well as cross-site script inclusion attacks.
...y set by the cross-origin-resource-policy http header that lets web sites and applications opt in to protection against certain requests from other origins (such as those issued with elements like <script> and <img>), to mitigate speculative side-channel attacks, like spectre, as well as cross-site script inclusion attacks.
...urce-policy http header that lets web sites and applications opt in to protection against certain requests from other origins (such as those issued with elements like <script> and <img>), to mitigate speculative side-channel attacks, like spectre, as well as cross-site script inclusion attacks.
...And 8 more matches

FeaturePolicy.features() - Web APIs
the features() method of the featurepolicy interface returns a list of names of all features supported by the user agent.
... the features() method of the featurepolicy interface returns a list of names of all features supported by the user agent.
... the features() method of the featurepolicy interface returns a list of names of all features supported by the user agent.
...And 7 more matches

Feature-Policy: fullscreen - HTTP
the http feature-policy header fullscreen directive controls whether the current document is allowed to use element.requestfullscreen().
... the http feature-policy header fullscreen directive controls whether the current document is allowed to use element.requestfullscreen().
...fullscreen mode.
...And 7 more matches

FeaturePolicy.allowedFeatures() - Web APIs
the allowedfeatures() method of the featurepolicy interface returns a list of directive names of all features allowed by the feature policy.enables introspection of individual directives of the feature policy it is run on.
... the allowedfeatures() method of the featurepolicy interface returns a list of directive names of all features allowed by the feature policy.enables introspection of individual directives of the feature policy it is run on.
... interface returns a list of directive names of all features allowed by the feature policy.enables introspection of individual directives of the feature policy it is run on.
...And 6 more matches

FeaturePolicy.allowsFeature() - Web APIs
the allowsfeature() method of the featurepolicy interface enables introspection of individual directives of the feature policy it is run on.
... the allowsfeature() method of the featurepolicy interface enables introspection of individual directives of the feature policy it is run on.
... the allowsfeature() method of the featurepolicy interface enables introspection of individual directives of the feature policy it is run on.
...And 6 more matches

FeaturePolicy.getAllowlistForFeature() - Web APIs
the getallowlistforfeature() method of the featurepolicy allows query of the allow list for a specific feature for the current feature policy.
... the getallowlistforfeature() method of the featurepolicy allows query of the allow list for a specific feature for the current feature policy.
...listforfeature() method of the featurepolicy allows query of the allow list for a specific feature for the current feature policy.
...And 6 more matches

FeaturePolicy - Web APIs
the featurepolicy interface of the feature policy api represents the set of policies applied to the current execution context.
... the featurepolicy interface of the feature policy api represents the set of policies applied to the current execution context.
... the featurepolicy interface of the feature policy api represents the set of policies applied to the current execution context.
...And 6 more matches

HTMLImageElement.referrerPolicy - Web APIs
the htmlimageelement.referrerpolicy property reflects the html referrerpolicy attribute of the <img> element defining which referrer is sent when fetching the resource.
... the htmlimageelement.referrerpolicy property reflects the html referrerpolicy attribute of the <img> element defining which referrer is sent when fetching the resource.
... the htmlimageelement.referrerpolicy property reflects the html referrerpolicy attribute of the <img> element defining which referrer is sent when fetching the resource.
...And 6 more matches

HTMLAnchorElement.referrerPolicy - Web APIs
the htmlanchorelement.referrerpolicy property reflect the html referrerpolicy attribute of the <a> element defining which referrer is sent when fetching the resource.
... the htmlanchorelement.referrerpolicy property reflect the html referrerpolicy attribute of the <a> element defining which referrer is sent when fetching the resource.
... the htmlanchorelement.referrerpolicy property reflect the html referrerpolicy attribute of the <a> element defining which referrer is sent when fetching the resource.
...And 5 more matches

HTMLAreaElement.referrerPolicy - Web APIs
the htmlareaelement.referrerpolicy property reflect the html referrerpolicy attribute of the <area> element defining which referrer is sent when fetching the resource.
... the htmlareaelement.referrerpolicy property reflect the html referrerpolicy attribute of the <area> element defining which referrer is sent when fetching the resource.
... the htmlareaelement.referrerpolicy property reflect the html referrerpolicy attribute of the <area> element defining which referrer is sent when fetching the resource.
...And 5 more matches

Request.referrerPolicy - Web APIs
the referrerpolicy read-only property of the request interface returns the referrer policy, which governs what referrer information, sent in the referer header, should be included with the request.
... the referrerpolicy read-only property of the request interface returns the referrer policy, which governs what referrer information, sent in the referer header, should be included with the request.
... the referrerpolicy read-only property of the request interface returns the referrer policy, which governs what referrer information, sent in the referer header, should be included with the request.
...And 5 more matches

Cross-Origin-Embedder-Policy - HTTP
the http cross-origin-embedder-policy (coep) response header prevents a document from loading any cross-origin resources that don't explicitly grant the document permission (using corp or cors).
... the http cross-origin-embedder-policy (coep) response header prevents a document from loading any cross-origin resources that don't explicitly grant the document permission (using corp or cors).
...grant the document permission (using corp or cors).
...And 5 more matches

Feature-Policy: geolocation - HTTP
the http feature-policy header geolocation directive controls whether the current document is allowed to use the geolocation interface.
... the http feature-policy header geolocation directive controls whether the current document is allowed to use the geolocation interface.
...enabled, calls to getcurrentposition() and watchposition() will cause those functions' callbacks to be invoked with a positionerror code of permission_denied.
...And 5 more matches

Document.featurePolicy - Web APIs
the featurepolicy read-only property of the document interface returns the featurepolicy interface which provides a simple api for inspecting the feature policies applied to a specific document.
... the featurepolicy read-only property of the document interface returns the featurepolicy interface which provides a simple api for inspecting the feature policies applied to a specific document.
... the featurepolicy read-only property of the document interface returns the featurepolicy interface which provides a simple api for inspecting the feature policies applied to a specific document.
...And 3 more matches

HTMLIFrameElement.featurePolicy - Web APIs
the featurepolicy read-only property of the htmliframeelement interface returns the featurepolicy interface which provides a simple api for introspecting the feature policies applied to a specific frame.
... the featurepolicy read-only property of the htmliframeelement interface returns the featurepolicy interface which provides a simple api for introspecting the feature policies applied to a specific frame.
... the featurepolicy read-only property of the htmliframeelement interface returns the featurepolicy interface which provides a simple api for introspecting the feature policies applied to a specific frame.
...And 3 more matches

HTMLLinkElement.referrerPolicy - Web APIs
the htmllinkelement.referrerpolicy property reflect the html referrerpolicy attribute of the <link> element defining which referrer is sent when fetching the resource.
... the htmllinkelement.referrerpolicy property reflect the html referrerpolicy attribute of the <link> element defining which referrer is sent when fetching the resource.
... the htmllinkelement.referrerpolicy property reflect the html referrerpolicy attribute of the <link> element defining which referrer is sent when fetching the resource.
...And 3 more matches

Cross-Origin-Opener-Policy - HTTP
the http cross-origin-opener-policy (coop) response header allows you to ensure a top-level document does not share a browsing context group with cross-origin documents.
...ocument with coop is opened in a new window, the opening document will not have a reference to it, and the window.opener property of the new window will be null.
...tes the browsing context exclusively to same-origin documents.
...And 3 more matches

Cross-Origin-Resource-Policy - HTTP
note: due to a bug in chrome, setting cross-origin-resource-policy can break pdf rendering, preventing visitors from being able to read past the first page of some pdfs.
... note: due to a bug in chrome, setting cross-origin-resource-policy can break pdf rendering, preventing visitors from being able to read past the first page of some pdfs.
...ug in chrome, setting cross-origin-resource-policy can break pdf rendering, preventing visitors from being able to read past the first page of some pdfs.
...And 3 more matches

Feature-Policy: encrypted-media - HTTP
the http feature-policy header encrypted-media directive controls whether the current document is allowed to use the encrypted media extensions api (eme).
... the http feature-policy header encrypted-media directive controls whether the current document is allowed to use the encrypted media extensions api (eme).
... the http feature-policy header encrypted-media directive controls whether the current document is allowed to use the encrypted media extensions api (eme).
...And 3 more matches

Feature-Policy: payment - HTTP
the http feature-policy header field's payment directive controls whether the current document is allowed to use the payment request api.
... the http feature-policy header field's payment directive controls whether the current document is allowed to use the payment request api.
... the http feature-policy header field's payment directive controls whether the current document is allowed to use the payment request api.
...And 3 more matches

Feature-Policy: sync-xhr - HTTP
the http feature-policy header sync-xhr directive controls whether the current document is allowed to make synchronous xmlhttprequest requests.
... the http feature-policy header sync-xhr directive controls whether the current document is allowed to make synchronous xmlhttprequest requests.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...And 3 more matches

nsIChannelPolicy
netwerk/base/public/nsichannelpolicy.idlscriptable a container for policy information to be used during channel creation.
... netwerk/base/public/nsichannelpolicy.idlscriptable a container for policy information to be used during channel creation.
...st changed in gecko 2.0 (firefox 4 / thunderbird 3.3 / seamonkey 2.1) this interface exists to allow the content policy mechanism to function properly during channel redirects.
...And 2 more matches

Feature-Policy: autoplay - HTTP
the http feature-policy header autoplay directive controls whether the current document is allowed to autoplay media requested through the htmlmediaelement interface.
... the http feature-policy header autoplay directive controls whether the current document is allowed to autoplay media requested through the htmlmediaelement interface.
...edia requested through the htmlmediaelement interface.
...And 2 more matches

Feature-Policy: battery - HTTP
the http feature-policy header battery directive controls whether the current document is allowed to gather information about the acceleration of the device through the batterymanager interface obtained via navigator.getbattery().
... the http feature-policy header battery directive controls whether the current document is allowed to gather information about the acceleration of the device through the batterymanager interface obtained via navigator.getbattery().
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...And 2 more matches

Feature-Policy: camera - HTTP
the http feature-policy header camera directive controls whether the current document is allowed to use video input devices.
... the http feature-policy header camera directive controls whether the current document is allowed to use video input devices.
... the http feature-policy header camera directive controls whether the current document is allowed to use video input devices.
...And 2 more matches

Feature-Policy: display-capture - HTTP
the http feature-policy header display-capture directive controls whether or not the document is permitted to use screen capture api, i.e.,getdisplaymedia() to capture the screen's contents.
... the http feature-policy header display-capture directive controls whether or not the document is permitted to use screen capture api, i.e.,getdisplaymedia() to capture the screen's contents.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...And 2 more matches

Feature-Policy: midi - HTTP
the http feature-policy header midi directive controls whether the current document is allowed to use the web midi api.
... the http feature-policy header midi directive controls whether the current document is allowed to use the web midi api.
... the http feature-policy header midi directive controls whether the current document is allowed to use the web midi api.
...And 2 more matches

Feature-Policy: publickey-credentials-get - HTTP
the http feature-policy header publickey-credentials-get directive controls whether the current document is allowed to access web authentcation api to create new public-key credentials, i.e, via navigator.credentials.get({publickey: ..., ...}).
... the http feature-policy header publickey-credentials-get directive controls whether the current document is allowed to access web authentcation api to create new public-key credentials, i.e, via navigator.credentials.get({publickey: ..., ...}).
... the http feature-policy header publickey-credentials-get directive controls whether the current document is allowed to access web authentcation api to create new public-key credentials, i.e, via navigator.credentials.get({publickey: ..., ...}).
...And 2 more matches

Feature-Policy: usb - HTTP
the http feature-policy header usb directive controls whether the current document is allowed to use the webusb api.
... the http feature-policy header usb directive controls whether the current document is allowed to use the webusb api.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...And 2 more matches

Feature-Policy: xr-spatial-tracking - HTTP
the http feature-policy header xr-spatial-tracking directive controls whether the current document is allowed to use the webxr device api.
... the http feature-policy header xr-spatial-tracking directive controls whether the current document is allowed to use the webxr device api.
...tial-tracking directive controls whether the current document is allowed to use the webxr device api.
...And 2 more matches

Same-origin policy for file: URIs - Archive of obsolete content
iginating file is an ancestor directory of the target file.
... the same directory as index.html or in a directory contained within the same directory as index.html.
...he like.
... frame and frameset are considered to share the same origin.

SecurityPolicyViolationEvent.disposition - Web APIs
the disposition read-only property of the securitypolicyviolationevent interface indicates how the violated policy is configured to be treated by the user agent.
... the disposition read-only property of the securitypolicyviolationevent interface indicates how the violated policy is configured to be treated by the user agent.
... of the securitypolicyviolationevent interface indicates how the violated policy is configured to be treated by the user agent.
...tion = violationeventinstance.disposition; value a value defined in the securitypolicyviolationeventdisposition enum representing the uri of the blocked resource.

Feature-Policy: accelerometer - HTTP
the http feature-policy header accelerometer directive controls whether the current document is allowed to gather information about the acceleration of the device through the accelerometer interface.
... the http feature-policy header accelerometer directive controls whether the current document is allowed to gather information about the acceleration of the device through the accelerometer interface.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: ambient-light-sensor - HTTP
the http feature-policy header ambient-light-sensor directive controls whether the current document is allowed to gather information about the amount of light in the environment around the device through the ambientlightsensor interface.
... the http feature-policy header ambient-light-sensor directive controls whether the current document is allowed to gather information about the amount of light in the environment around the device through the ambientlightsensor interface.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
... allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: document-domain - HTTP
the http feature-policy header document-domain directive controls whether the current document is allowed to set document.domain.
... the http feature-policy header document-domain directive controls whether the current document is allowed to set document.domain.
... the http feature-policy header document-domain directive controls whether the current document is allowed to set document.domain.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).

Feature-Policy: microphone - HTTP
the http feature-policy header microphone directive controls whether the current document is allowed to use audio input devices.
... the http feature-policy header microphone directive controls whether the current document is allowed to use audio input devices.
... the http feature-policy header microphone directive controls whether the current document is allowed to use audio input devices.
...: the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: picture-in-picture - HTTP
the http feature-policy header picture-in-picture directive controls whether the current document is allowed to play a video in a picture-in-picture mode via the corresponding api.
... the http feature-policy header picture-in-picture directive controls whether the current document is allowed to play a video in a picture-in-picture mode via the corresponding api.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: screen-wake-lock - HTTP
note: this api is still actively being developed and available only behind a flag on select browsers and platforms.
...api is still actively being developed and available only behind a flag on select browsers and platforms.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: wake-lock - HTTP
note: this api is still actively being developed and available only behind a flag on select browsers and platforms.
... note: this api is still actively being developed and available only behind a flag on select browsers and platforms.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...ult in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Same origin policy for XBL - Archive of obsolete content
the same origin policy used for xbl documents is different from the policy used for other content.
... the same origin policy used for xbl documents is different from the policy used for other content.
...made on if there isn't a script.

SecurityPolicyViolationEvent.blockedURI - Web APIs
the blockeduri read-only property of the securitypolicyviolationevent interface is a usvstring representing the uri of the resource that was blocked because it violates a policy.
... the blockeduri read-only property of the securitypolicyviolationevent interface is a usvstring representing the uri of the resource that was blocked because it violates a policy.
...resenting the uri of the resource that was blocked because it violates a policy.

SecurityPolicyViolationEvent.columnNumber - Web APIs
the columnnumber read-only property of the securitypolicyviolationevent interface is the column number in the document or worker at which the violation occurred.
... the columnnumber read-only property of the securitypolicyviolationevent interface is the column number in the document or worker at which the violation occurred.
...mn number in the document or worker at which the violation occurred.

SecurityPolicyViolationEvent.documentURI - Web APIs
the documenturi read-only property of the securitypolicyviolationevent interface is a usvstring representing the uri of the document or worker in which the violation was found.
... the documenturi read-only property of the securitypolicyviolationevent interface is a usvstring representing the uri of the document or worker in which the violation was found.
...r worker in which the violation was found.

SecurityPolicyViolationEvent.effectiveDirective - Web APIs
the effectivedirective read-only property of the securitypolicyviolationevent interface is a domstring representing the directive whose enforcement uncovered the violation.
... the effectivedirective read-only property of the securitypolicyviolationevent interface is a domstring representing the directive whose enforcement uncovered the violation.
...e whose enforcement uncovered the violation.

SecurityPolicyViolationEvent.lineNumber - Web APIs
the linenumber read-only property of the securitypolicyviolationevent interface is the line number in the document or worker at which the violation occurred.
... the linenumber read-only property of the securitypolicyviolationevent interface is the line number in the document or worker at which the violation occurred.
...e number in the document or worker at which the violation occurred.

SecurityPolicyViolationEvent.referrer - Web APIs
the referrer read-only property of the securitypolicyviolationevent interface is a usvstring representing the referrer of the resources whose policy was violated.
... the referrer read-only property of the securitypolicyviolationevent interface is a usvstring representing the referrer of the resources whose policy was violated.
...he resources whose policy was violated.

SecurityPolicyViolationEvent.sample - Web APIs
the sample read-only property of the securitypolicyviolationevent interface is a domstring representing a sample of the resource that caused the violation.
...hat caused the violation.
...sed the violation, usually the first 40 characters.

SecurityPolicyViolationEvent.sourceFile - Web APIs
the sourcefile read-only property of the securitypolicyviolationevent interface is a usvstring representing the uri of the document or worker in which the violation was found.
... the sourcefile read-only property of the securitypolicyviolationevent interface is a usvstring representing the uri of the document or worker in which the violation was found.
...ument or worker in which the violation was found.

SecurityPolicyViolationEvent.statusCode - Web APIs
the statuscode read-only property of the securitypolicyviolationevent interface is a number representing the http status code of the document or worker in which the violation occurred.
... the statuscode read-only property of the securitypolicyviolationevent interface is a number representing the http status code of the document or worker in which the violation occurred.
...nt or worker in which the violation occurred.

SecurityPolicyViolationEvent.violatedDirective - Web APIs
the violateddirective read-only property of the securitypolicyviolationevent interface is a domstring representing the directive whose enforcement uncovered the violation.
... the violateddirective read-only property of the securitypolicyviolationevent interface is a domstring representing the directive whose enforcement uncovered the violation.
...hose enforcement uncovered the violation.

Feature-Policy: gyroscope - HTTP
the http feature-policy header gyroscope directive controls whether the current document is allowed to gather information about the orientation of the device through the gyroscope interface.
... the http feature-policy header gyroscope directive controls whether the current document is allowed to gather information about the orientation of the device through the gyroscope interface.
...: the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: layout-animations - HTTP
the http feature-policy header layout-animations directive controls whether the current document is allowed to show layout animations.
... the http feature-policy header layout-animations directive controls whether the current document is allowed to show layout animations.
...: the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: legacy-image-formats - HTTP
the http feature-policy header legacy-image-formats directive controls whether the current document is allowed to display images in legacy formats.
... the http feature-policy header legacy-image-formats directive controls whether the current document is allowed to display images in legacy formats.
...: the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: magnetometer - HTTP
the http feature-policy header magnetometer directive controls whether the current document is allowed to gather information about the orientation of the device through the magnetometer interface.
... the http feature-policy header magnetometer directive controls whether the current document is allowed to gather information about the orientation of the device through the magnetometer interface.
...: the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: oversized-images - HTTP
the http feature-policy header oversized-images directive controls whether the current document is allowed to download and display large images.
... the http feature-policy header oversized-images directive controls whether the current document is allowed to download and display large images.
...e is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: unoptimized-images - HTTP
the http feature-policy header unoptimized-images directive controls whether the current document is allowed to download and display unoptimized images.
... the http feature-policy header unoptimized-images directive controls whether the current document is allowed to download and display unoptimized images.
...: the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Feature-Policy: unsized-media - HTTP
the http feature-policy header unsized-media directive controls whether the current document is allowed to change the size of media elements after the initial layout is complete.
... the http feature-policy header unsized-media directive controls whether the current document is allowed to change the size of media elements after the initial layout is complete.
...ts in nested browsing contexts.

Feature-Policy: vibrate - HTTP
the http feature-policy header vibrate directive controls whether the current document is allowed to trigger device vibrations via navigator.vibrate() method of vibration api.
... the http feature-policy header vibrate directive controls whether the current document is allowed to trigger device vibrations via navigator.vibrate() method of vibration api.
... the feature is allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Same-origin policy - Web security
the same-origin policy is a critical security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin.
...lank is often used as a url of new, empty popup windows into which the parent script writes content (e.g.
...bers are both null.

JSSecurityCallbacks.contentSecurityPolicyAllows
the jssecuritycallbacks.contentsecuritypolicyallows callback is called when a script attempts to access an object property.
...the callback set by js_setcheckobjectaccesscallback.) syntax typedef jsbool (*jscspevalchecker)(jscontext *cx); name type description cx jscontext * the js context in which the property access attempt is occurring.

Same-origin policy - MDN Web Docs Glossary: Definitions of Web-related terms
the same-origin policy is a critical security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin.

Feature-Policy: xr - HTTP
this feature policy directive was at one point defined as xr (but implemented in chrome as vr), use xr-spatial-tracking instead.

HTTP Index - HTTP
on management in http/1.x connection management, guide, http, networking, performance, webmechanics connection management is a key topic in http: opening and maintaining connections largely impacts the performance of web sites and web applications.
...n management, guide, http, networking, performance, webmechanics connection management is a key topic in http: opening and maintaining connections largely impacts the performance of web sites and web applications.
... webmechanics connection management is a key topic in http: opening and maintaining connections largely impacts the performance of web sites and web applications.
...And 193 more matches

sslfnc.html
of the ssl reference that we are migrating into the format described in the mdn style guide.
...ration functions ssl communication functions ssl functions used by callbacks ssl handshake functions nss shutdown function deprecated functions ssl initialization functions this section describes the initialization functions that are specific to ssl.
...yn.db, and secmod.db files (wheren is a numeric digit) in the specified directory.
...And 133 more matches

Index - Web APIs
object representing the uri of the document.
... document which is currently being presented in full-screen mode be taken out of full-screen mode, restoring the previous state of the screen.
... presented in full-screen mode be taken out of full-screen mode, restoring the previous state of the screen.
...And 120 more matches

Index - HTTP
tion header indicates an alternate location for the returned data.
...se is to indicate the url of a resource transmitted as the result of content negotiation.
...y-policy response header allows web site administrators to control resources the user agent is allowed to load for a given page.
...And 77 more matches

Finishing the Component
rozen interfaces, you should contact the developers who are responsible for the code you're trying to use (i.e., module owners) and ask them how best to do what you are trying to do.
...erested in using.
...g interfaces into your build environment to get and implement interfaces that are not part of gecko in your component, simply create a new directory in the gecko sdk named unfrozen.
...And 22 more matches

nsICacheService
key 2.1) this interface is no longer supported and planned to be removed soon: use nsicachestorageservice instead.
...is interface is no longer supported and planned to be removed soon: use nsicachestorageservice instead.
...ce instead.
...And 19 more matches

HTTP headers - HTTP
edirect a page to.
...d.
...erver should return.
...And 15 more matches

RTCConfiguration - Web APIs
options for an rtcpeerconnection.
...uration() methods, which allow inspecting and changing the configuration while a connection is established.
... size of the ice candidate pool may trigger the beginning of ice gathering.
...And 14 more matches

nsIIOService
andler(in string ascheme); nsichannel newchannel(in autf8string aspec, in string aorigincharset, in nsiuri abaseuri); obsolete since gecko 48 nsichannel newchannel2(in autf8string aspec, in string aorigincharset, in nsiuri abaseuri, in nsidomnode aloadingnode, in nsiprincipal aloadingprincipal, in nsiprincipal atriggeringprincipal, in uint32_t asecurityflags, in uint32_t acontentpolicytype); nsichannel newchannelfromuri(in nsiuri auri); obsolete since gecko 48 nsichannel newchannelfromuri2(in nsiuri auri, in nsidomnode aloadingnode, in nsiprincipal aloadingprincipal, in nsiprincipal atriggeringprincipal, in unsigned long asecurityflags, in unsigned long acontentpolicytype); nsichannel newchannelfromuriwithloadinfo(in nsiuri auri, in nsiloadinfo aload...
...lags, in unsigned long acontentpolicytype); nsichannel newchannelfromuriwithloadinfo(in nsiuri auri, in nsiloadinfo aloadinfo); nsichannel newchannelfromuriwithproxyflags2(in nsiuri auri, in nsiuri aproxyuri, in uint32_t aproxyflags,in nsidomnode aloadingnode, in nsiprincipal aloadingprincipal, in nsiprincipal atriggeringprincipal, in uint32_t asecurityflags, in uint32_t acontentpolicytype); nsiuri newfileuri(in nsifile afile); nsiuri newuri(in autf8string aspec, in string aorigincharset, in nsiuri abaseuri); attributes attribute type description offline boolean returns true if networking is in "offline" mode.
...cks if a port number is banned.
...And 12 more matches

CSP: script-src - HTTP
the http content-security-policy (csp) script-src directive specifies valid sources for javascript.
...o <script> elements, but also things like inline script event handlers (onclick) and xslt stylesheets which can trigger script execution.
...lso things like inline script event handlers (onclick) and xslt stylesheets which can trigger script execution.
...And 12 more matches

Autoplay guide for media and Web Audio APIs - Web media technologies
ure that causes audio to begin to play without the user specifically requesting that playback begin.
...least one of the following is true: the audio is muted or its volume is set to 0 the user has interacted with the site (by clicking, tapping, pressing keys, etc.) if the site has been whitelisted; this may happen either automatically if the browser determines that the user engages with media frequently, or manually through preferences or other user interface features if the autoplay feature policy is used to grant autoplay support to an <iframe> and its document.
...eb audio api, a web site or app can start playing audio using the start() method on a source node linked to the audiocontext.
...And 12 more matches

CSP: base-uri - HTTP
the http content-security-policy base-uri directive restricts the urls which can be used in a document's <base> element.
...rls which can be used in a document's <base> element.
... document's <base> element.
...And 10 more matches

CSP: form-action - HTTP
the http content-security-policy (csp) form-action directive restricts the urls which can be used as the target of a form submissions from a given context.
...uld block redirects after a form submission is debated and browser implementations of this aspect are inconsistent (e.g.
...a form submission is debated and browser implementations of this aspect are inconsistent (e.g.
...And 10 more matches

CSP: style-src - HTTP
the http content-security-policy (csp) style-src directive specifies valid sources for stylesheets.
... the http content-security-policy (csp) style-src directive specifies valid sources for stylesheets.
... the http content-security-policy (csp) style-src directive specifies valid sources for stylesheets.
...And 10 more matches

nsIHttpChannel
inalresponseheader(in acstring aheader, in nsihttpheadervisitor avisitor); acstring getrequestheader(in acstring aheader); acstring getresponseheader(in acstring header); boolean isnocacheresponse(); boolean isnostoreresponse(); void redirectto(in nsiuri anewuri); void setemptyrequestheader(in acstring aheader); void setreferrerwithpolicy(in nsiuri referrer, in unsigned long referrerpolicy); void setrequestheader(in acstring aheader, in acstring avalue, in boolean amerge); void setresponseheader(in acstring header, in acstring value, in boolean merge); void visitoriginalresponseheaders(in nsihttpheadervisitor avisitor); void visitrequestheaders(in nsihttpheadervisitor avisitor); void ...
...e, in boolean amerge); void setresponseheader(in acstring header, in acstring value, in boolean merge); void visitoriginalresponseheaders(in nsihttpheadervisitor avisitor); void visitrequestheaders(in nsihttpheadervisitor avisitor); void visitresponseheaders(in nsihttpheadervisitor avisitor); constants constant description referrer_policy_no_referrer_when_downgrade default; indicates not to pass on the referrer when downgrading from https to http referrer_policy_no_referrer indicates no referrer will be sent referrer_policy_origin only send the origin of the referring uri referrer_policy_origin_when_xorigin same as the default; only send the origin of the referring uri for cross-origin reques...
...ngrade default; indicates not to pass on the referrer when downgrading from https to http referrer_policy_no_referrer indicates no referrer will be sent referrer_policy_origin only send the origin of the referring uri referrer_policy_origin_when_xorigin same as the default; only send the origin of the referring uri for cross-origin requests referrer_policy_unsafe_url always send the referrer, even when downgrading from https to http attributes attribute type description allowpipelining boolean this attribute is a hint to the channel to indicate whether or not the underlying http transaction should be allowed to be pipelined with other transactions.
...And 9 more matches

Index
dor, administrators inside an organizational infrastructure, or the software user.
.../required to perform additional checks.
...e email address at the desired web site's domain, it's required that the ca performs a verification of real world identity documents (such as a company registration document with the country's authority), and it's also required that a browser software performs a revocation check with the ca, prior to granting validity to the certificate.
...And 8 more matches

MediaDevices.getUserMedia() - Web APIs
pen if the browsing context is insecure (that is, the page was loaded using http rather than https).
...hat is, the page was loaded using http rather than https).
...ort, a page loaded using https or the file:/// url scheme, or a page loaded from localhost.
...And 8 more matches

Index - Archive of obsolete content
n hang the browser or even crash the operating system in some cases.
...h the operating system in some cases.
...ther schemes are used internally by mozilla modules to communicate with each other.
...And 7 more matches

Index - MDN Web Docs Glossary: Definitions of Web-related terms
n stored data.
...n rendering a document; that is, the "<!doctype html>" doctype ensures that the browser makes a best-effort attempt at following the relevant specifications, rather than using a different rendering mode that is incompatible with some specifications.
... makes a best-effort attempt at following the relevant specifications, rather than using a different rendering mode that is incompatible with some specifications.
...And 7 more matches

NSS_3.12_release_notes.html
3.12 3 new shared library are shipped with nss 3.12: nssutil sqlite nssdbm 1 new include file is shipped with nss3.12: utilrename.h new functions in the nss shared library: cert_checknamespace (see cert.h) cert_encodecertpoliciesextension (see cert.h) cert_encodeinfoaccessextension (see cert.h) cert_encodeinhibitanyextension (see cert.h) cert_encodenoticereference (see cert.h) cert_encodepolicyconstraintsextension (see cert.h) cert_encodepolicymappingextension (see cert.h) cert_encodesubjectkeyid (see certdb/cert.h) cert_encodeusernotice (see cert.h) cert_findcrlentryreasonexten (see cert.h) cert_findcrlnumberexten (see cert.h) cert_findnameconstraintsexten (see cert.h) cert_getclassicocspdisabledpolicy (see cert.h) cert_getclassicocspenabledhardfailurepolicy (see cert.h) cert_getclassi...
...ee cert.h) cert_encodepolicymappingextension (see cert.h) cert_encodesubjectkeyid (see certdb/cert.h) cert_encodeusernotice (see cert.h) cert_findcrlentryreasonexten (see cert.h) cert_findcrlnumberexten (see cert.h) cert_findnameconstraintsexten (see cert.h) cert_getclassicocspdisabledpolicy (see cert.h) cert_getclassicocspenabledhardfailurepolicy (see cert.h) cert_getclassicocspenabledsoftfailurepolicy (see cert.h) cert_getpkixverifynistrevocationpolicy (see cert.h) cert_getusepkixforvalidation (see cert.h) cert_getvaliddnspatternsfromcert (see cert.h) cert_newtempcertificate (see cert.h) cert_setocsptimeout (see certhigh/ocsp.h) cert_setusepkixforvalidation (see cert.h) cert_pkixverifycert (see cert.h) hash_gettype (see sechash.h) nss_initwithmerge (see nss.h) pk11_createmergelog (see pk11pub.
...kip_test_on_missing_source cert_rev_m_require_info_on_missing_source cert_rev_m_ignore_missing_fresh_info cert_rev_m_fail_on_missing_fresh_info cert_rev_m_stop_testing_on_fresh_info cert_rev_m_continue_testing_on_fresh_info cert_rev_mi_test_each_method_separately cert_rev_mi_test_all_local_information_first cert_rev_mi_no_overall_info_requirement cert_rev_mi_require_some_fresh_info_available cert_policy_flag_no_mapping cert_policy_flag_explicit cert_policy_flag_no_any cert_enable_ldap_fetch cert_enable_http_fetch new macro in utilrename.h: smime_aes_cbc_128 the nssckbi pkcs #11 module's version changed to 1.70.
...And 7 more matches

nsICookie
an 1, 1970.
...d only.
...host (possibly fully qualified) of the cookie.
...And 7 more matches

<iframe>: The Inline Frame element - HTML: Hypertext Markup Language
none, both the starting and ending tag are mandatory.
...e no corresponding role permitted aria roles application, document, img, none, presentation dom interface htmliframeelement attributes this element includes the global attributes.
... <iframe> can activate fullscreen mode by calling the requestfullscreen() method.
...And 7 more matches

CSP: report-uri - HTTP
the deprecated http content-security-policy (csp) report-uri directive instructs the user agent to report attempts to violate the content security policy.
...t of json documents sent via an http post request to the specified uri.
...https://endpoint.com; report-to groupname in browsers that support report-to, the report-uri directive will be ignored.
...And 7 more matches

CSP: trusted-types - HTTP
the http content-security-policy (csp) trusted-types directive instructs user agents to restrict usage of known dom xss sinks to a predefined set of functions that only accept non-spoofable, typed values in place of strings.
...age of known dom xss sinks to a predefined set of functions that only accept non-spoofable, typed values in place of strings.
...t of functions that only accept non-spoofable, typed values in place of strings.
...And 7 more matches

Planned changes to shared memory - JavaScript
cks with high-resolution timers, which can be created with shared memory.
...fox 79, the features described in this document are enabled by default.
...-policy with same-origin as value (protects your origin from attackers) cross-origin-embedder-policy with require-corp as value (protects victims from your origin) with these two headers set, postmessage() will no longer throw for sharedarraybuffer objects and shared memory across threads is therefore available.
...And 7 more matches

NSS Config Options
nss config options format the specified ciphers will be allowed by policy, but an application may allow more by policy explicitly: config="allow=curve1:curve2:hash1:hash2:rsa-1024..." only the specified hashes and curves will be allowed: config="disallow=all allow=sha1:sha256:secp256r1:secp384r1" only the specified hashes and curves will be allowed, and rsa keys of 2048 or more will be accepted, and dh key exchange with 1024-bit primes or more: config="disallow=all allow=sha1:sha256:secp256r1:secp384r1:min-rsa=2048:min-dh=1024" a policy that enables the aes ciphersuites and the secp256/384 curves: config="allow=aes128-cbc:aes128-gcm::hmac-sha1:sha1:sha256:sha384:rsa:ecdhe-rsa:secp256r1:secp384r1" turn off md5 config="disallow=md5" turn off md5 and sha1 only for ssl config...
...:ecdhe-rsa:secp256r1:secp384r1" turn off md5 config="disallow=md5" turn off md5 and sha1 only for ssl config="disallow=md5(ssl):sha1(ssl)" disallow values are parsed first, and then allow values, independent of the order in which they appear.
...onfig="disallow=md5(ssl):sha1(ssl)" disallow values are parsed first, and then allow values, independent of the order in which they appear.
...And 6 more matches

NSS functions
he old ssl reference.
...r) link for each function provides access to the function definition, prototype definition, and source code references.
...tion definition, prototype definition, and source code references.
...And 6 more matches

CSP: child-src - HTTP
the http content-security-policy (csp) child-src directive defines the valid sources for web workers and nested browsing contexts loaded using elements such as <frame> and <iframe>.
...ed using elements such as <frame> and <iframe>.
...<frame> and <iframe>.
...And 6 more matches

CSP: connect-src - HTTP
the http content-security-policy (csp) connect-src directive restricts the urls which can be loaded using script interfaces.
...ote: connect-src 'self' does not resolve to websocket schemas in all browsers, more info: https://github.com/w3c/webappsec-csp/issues/7 csp version 1 directive type fetch directive default-src fallback yes.
...es not resolve to websocket schemas in all browsers, more info: https://github.com/w3c/webappsec-csp/issues/7 csp version 1 directive type fetch directive default-src fallback yes.
...And 6 more matches

CSP: font-src - HTTP
the http content-security-policy (csp) font-src directive specifies valid sources for fonts loaded using @font-face.
... the http content-security-policy (csp) font-src directive specifies valid sources for fonts loaded using @font-face.
... http content-security-policy (csp) font-src directive specifies valid sources for fonts loaded using @font-face.
...And 6 more matches

CSP: frame-src - HTTP
the http content-security-policy (csp) frame-src directive specifies valid sources for nested browsing contexts loading using elements such as <frame> and <iframe>.
...ive specifies valid sources for nested browsing contexts loading using elements such as <frame> and <iframe>.
...s for nested browsing contexts loading using elements such as <frame> and <iframe>.
...And 6 more matches

CSP: img-src - HTTP
the http content-security-policy img-src directive specifies valid sources of images and favicons.
... the http content-security-policy img-src directive specifies valid sources of images and favicons.
... the http content-security-policy img-src directive specifies valid sources of images and favicons.
...And 6 more matches

CSP: media-src - HTTP
the http content-security-policy (csp) media-src directive specifies valid sources for loading media using the <audio> and <video> elements.
...e http content-security-policy (csp) media-src directive specifies valid sources for loading media using the <audio> and <video> elements.
...licy (csp) media-src directive specifies valid sources for loading media using the <audio> and <video> elements.
...And 6 more matches

CSP: navigate-to - HTTP
the http content-security-policy (csp) navigate-to directive restricts the urls to which a document can initiate navigations by any means including <form> (if form-action is not specified), <a>, window.location, window.open, etc.
...tes not on what this document is allowed to navigate to.
...ent is allowed to navigate to.
...And 6 more matches

CSP: object-src - HTTP
the http content-security-policy object-src directive specifies valid sources for the <object>, <embed>, and <applet> elements.
...or allow for <iframe>).
...erefore it is recommended to restrict this fetch-directive (e.g.
...And 6 more matches

CSP: plugin-types - HTTP
the http content-security-policy (csp) plugin-types directive restricts the set of plugins that can be embedded into a document by limiting the types of resources which can be loaded.
...load does not declare a valid mime type, the declared type does not match one of specified types in the plugin-types directive, the fetched resource does not match the declared type.
...lid mime type, the declared type does not match one of specified types in the plugin-types directive, the fetched resource does not match the declared type.
...And 6 more matches

CSP: prefetch-src - HTTP
the http content-security-policy (csp) prefetch-src directive specifies valid resources that may be prefetched or prerendered.
... the http content-security-policy (csp) prefetch-src directive specifies valid resources that may be prefetched or prerendered.
...security-policy (csp) prefetch-src directive specifies valid resources that may be prefetched or prerendered.
...And 6 more matches

CSP: script-src-attr - HTTP
the http content-security-policy (csp) script-src-attr directive specifies valid sources for javascript inline event handlers.
...like onclick, but not urls loaded directly into <script> elements.
... loaded directly into <script> elements.
...And 6 more matches

CSP: script-src-elem - HTTP
the http content-security-policy (csp) script-src-elem directive specifies valid sources for javascript <script> elements, but not inline script event handlers like onclick.
...ript> elements, but not inline script event handlers like onclick.
...line script event handlers like onclick.
...And 6 more matches

CSP: style-src-attr - HTTP
the http content-security-policy (csp) style-src-attr directive specifies valid sources for inline styles applied to individual dom elements.
...urces for inline styles applied to individual dom elements.
...plied to individual dom elements.
...And 6 more matches

CSP: style-src-elem - HTTP
the http content-security-policy (csp) style-src-elem directive specifies valid sources for stylesheets <style> elements and <link> elements with rel="stylesheet".
...<style> elements and <link> elements with rel="stylesheet".
...> elements with rel="stylesheet".
...And 6 more matches

Intercepting Page Loads - Archive of obsolete content
age loads anywhere in the application, not only in browser windows.
...ows.
...eep in mind that xul windows such as the dom inspector window and the add-ons manager window allow (limited) web navigation.
...And 5 more matches

Midas editor module security preferences
be sure to restore the default settings when you're done!
...e to restore the default settings when you're done!
...hanging the preferences in firefox quit firefox.
...And 5 more matches

nsICookieConsent
netwerk/cookie/public/nsicookieconsent.idlscriptable please add a summary to this article.
... netwerk/cookie/public/nsicookieconsent.idlscriptable please add a summary to this article.
... inherits from: nsisupports method overview void getconsent(); methods getconsent() gives a decision on what should be done with a cookie, based on a site's p3p policy and the user's preferences.
...And 5 more matches

RTCPeerConnection() - Web APIs
the rtcpeerconnection() constructor returns a newly-created rtcpeerconnection, which represents a connection between the local device and a remote peer.
...tax pc = new rtcpeerconnection([configuration]); parameters configuration optional an rtcconfiguration dictionary providing options to configure the new connection.
... size of the ice candidate pool may trigger the beginning of ice gathering.
...And 5 more matches

RTCPeerConnection - Web APIs
d wait for a the promise returned by peeridentity to resolve with an identity.
...eturned by peeridentity to resolve with an identity.
... to the rtcpeerconnection when a mediastream is removed from the connection.
...And 5 more matches

<script>: The Script element - HTML: Hypertext Markup Language
ed manipulation.
...s set to indicate that the script should not be executed in browsers that support es2015 modules — in effect, this can be used to serve fallback scripts to older browsers that do not support modular javascript code.
...dules — in effect, this can be used to serve fallback scripts to older browsers that do not support modular javascript code.
...And 5 more matches

CSP: default-src - HTTP
the http content-security-policy (csp) default-src directive serves as a fallback for the other csp fetch directives.
... default-src directive and uses this value for it: child-src connect-src font-src frame-src img-src manifest-src media-src object-src prefetch-src script-src script-src-elem script-src-attr style-src style-src-elem style-src-attr worker-src csp version 1 directive type fetch directive syntax one or more sources can be allowed for the default-src policy: content-security-policy: default-src <source>; content-security-policy: default-src <source> <source>; sources <source> can be one of the following: <host-source> internet hosts by name or ip address, as well as an optional url scheme and/or port number.
...ne <script> elements, javascript: urls, inline event handlers, and inline <style> elements.
...And 5 more matches

CSP: frame-ancestors - HTTP
the http content-security-policy (csp) frame-ancestors directive specifies valid parents that may embed a page using <frame>, <iframe>, <object>, <embed>, or <applet>.
...et>.
...ve to 'none' is similar to x-frame-options: deny (which is also supported in older browsers).
...And 5 more matches

CSP: manifest-src - HTTP
the http content-security-policy: manifest-src directive specifies which manifest can be applied to the resource.
... the http content-security-policy: manifest-src directive specifies which manifest can be applied to the resource.
...http content-security-policy: manifest-src directive specifies which manifest can be applied to the resource.
...And 5 more matches

CSP: referrer - HTTP
the http content-security-policy (csp) referrer directive used to specify information in the referer header (with a single r as this was a typo in the original spec) for links away from a page.
... the http content-security-policy (csp) referrer directive used to specify information in the referer header (with a single r as this was a typo in the original spec) for links away from a page.
... the http content-security-policy (csp) referrer directive used to specify information in the referer header (with a single r as this was a typo in the original spec) for links away from a page.
...And 5 more matches

CSP: sandbox - HTTP
the http content-security-policy (csp) sandbox directive enables a sandbox for the requested resource similar to the <iframe> sandbox attribute.
... the http content-security-policy (csp) sandbox directive enables a sandbox for the requested resource similar to the <iframe> sandbox attribute.
...ox for the requested resource similar to the <iframe> sandbox attribute.
...And 5 more matches

CSP: worker-src - HTTP
the http content-security-policy (csp) worker-src directive specifies valid sources for worker, sharedworker, or serviceworker scripts.
... fallback if this directive is absent, the user agent will first look for the child-src directive, then the script-src directive, then finally for the default-src directive, when governing worker execution.
...his directive is absent, the user agent will first look for the child-src directive, then the script-src directive, then finally for the default-src directive, when governing worker execution.
...And 5 more matches

Limitations of chrome scripts
will throw an exception and you'll see an "unsafe cpow usage forbidden” error in the browser console.
...in the browser console.
...-ons should avoid passing cpows into non-addon code.
...And 4 more matches

Script security
this page provides an overview of the script security architecture in gecko.
...ors do not need to learn c++.
...t is a highly dynamic, malleable language, and without help it's difficult to write system-privileged code that interacts safely with untrusted web content.
...And 4 more matches

An overview of NSS Internals
dor, administrators inside an organizational infrastructure, or the software user.
.../required to perform additional checks.
...e email address at the desired web site's domain, it's required that the ca performs a verification of real world identity documents (such as a company registration document with the country's authority), and it's also required that a browser software performs a revocation check with the ca, prior to granting validity to the certificate.
...And 4 more matches

NSS 3.22 release notes
_signwithmechanism() are provided to allow rsa keys to be used with pss.
..._rsa sec_oid_tls_dh_dss sec_oid_tls_dh_anon sec_oid_tls_ecdhe_ecdsa sec_oid_tls_ecdhe_rsa sec_oid_tls_ecdh_ecdsa sec_oid_tls_ecdh_rsa sec_oid_tls_ecdh_anon sec_oid_tls_rsa_export sec_oid_tls_dhe_rsa_export sec_oid_tls_dhe_dss_export sec_oid_tls_dh_rsa_export sec_oid_tls_dh_dss_export sec_oid_tls_dh_anon_export sec_oid_apply_ssl_policy in sslt.h ssl_signed_cert_timestamp_xtn is added to sslextensiontype.
...ec_oid_tls_dhe_rsa_export sec_oid_tls_dhe_dss_export sec_oid_tls_dh_rsa_export sec_oid_tls_dh_dss_export sec_oid_tls_dh_anon_export sec_oid_apply_ssl_policy in sslt.h ssl_signed_cert_timestamp_xtn is added to sslextensiontype.
...And 4 more matches

NSS Tools sslstrength
sslstrength summary a simple command-line client which connects to an ssl-server, and reports back the encryption cipher and strength used.
...t is used to identify the cipher preferences in the ciphers= command.
...nt, and if not given, will default to the https port (443).
...And 4 more matches

NSS Tools sslstrength
sslstrength summary a simple command-line client which connects to an ssl-server, and reports back the encryption cipher and strength used.
...ut is used to identify the cipher preferences in the ciphers= command.
...ent, and if not given, will default to the https port (443).
...And 4 more matches

Console messages - Firefox Developer Tools
mixed content for more details.
... mixed (insecure) display content on a secure page the page contained mixed display content: that is, the main page was served over https, but asked the browser to load "display content", such as images, over http.
... the page contained mixed display content: that is, the main page was served over https, but asked the browser to load "display content", such as images, over http.
...And 4 more matches

Sensor APIs - Web APIs
nce is enhanced rather than degraded.
... a handler for sensor.onerror to catch errors thrown during use.
...permission.
...And 4 more matches

Web security
ensuring that your website or open web application is secure is critical.
...open web application is secure is critical.
...s web browser.
...And 4 more matches

Index
code produce code which is as performant as possible—not just on its own, but in terms of its impact on other parts of firefox.
... on its own, but in terms of its impact on other parts of firefox.
...s keep in mind the side effects your changes may have, from blocking other tasks to interfering with other user interface elements.
...And 3 more matches

Performance
and startup savings should outstrip the added cost of script evaluation.
...d cost of script evaluation.
...dons.
...And 3 more matches

sslintro.html
work security services.
...s.
...empotent, so call it only once.
...And 3 more matches

nsIWebBrowserPersist
void cancelsave(); void savechannel(in nsichannel achannel, in nsisupports afile); void savedocument(in nsidomdocument adocument, in nsisupports afile, in nsisupports adatapath, in string aoutputcontenttype, in unsigned long aencodingflags, in unsigned long awrapcolumn); void saveuri(in nsiuri auri, in nsisupports acachekey, in nsiuri areferrer, in long areferrerpolicy, in nsiinputstream apostdata, in string aextraheaders, in nsisupports afile, in nsiloadcontext aprivacycontext); void saveprivacyawareuri(in nsiuri auri, in nsisupports acachekey, in nsiuri areferrer, in long areferrerpolicy, in nsiinputstream apostdata, in string aextraheaders, in nsisupports afile, in boolean aisprivate); attributes attribute type description ...
...mn for text documents, indicates the desired width to wrap text at.
...d-on code.
...And 3 more matches

Screen Capture API - Web APIs
or the cursor property for the settings and constraints.
...nts.
... motion, and never.
...And 3 more matches

<link>: The External Resource Link element - HTML: Hypertext Markup Language
ether it has a link type that is body-ok.
...for example, the stylesheet link type is body-ok, and therefore <link rel="stylesheet"> is permitted in the body.
...r, this isn't a good practice to follow; it makes more sense to separate your <link> elements from your body content, putting them in the <head>.
...And 3 more matches

CSP: report-to - HTTP
the content-security-policy report-to http response header field instructs the user agent to store reporting endpoints for an origin.
... the content-security-policy report-to http response header field instructs the user agent to store reporting endpoints for an origin.
... instructs the user agent to store reporting endpoints for an origin.
...And 3 more matches

CSP: upgrade-insecure-requests - HTTP
the http content-security-policy (csp) upgrade-insecure-requests directive instructs user agents to treat all of a site's insecure urls (those served over http) as though they have been replaced with secure urls (those served over https).
...ect to http.
...t users visiting your site via links on third-party sites will be upgraded to https for the top-level navigation and thus does not replace the strict-transport-security (hsts) header, which should still be set with an appropriate max-age to ensure that users are not subject to ssl stripping attacks.
...And 3 more matches

Expect-CT - HTTP
consider this value to be either 2,147,483,648 (231) or the greatest positive integer it can represent.
...ent should report expect-ct failures.
... to the user agent both that compliance to the certificate transparency policy should be enforced and that violations should be reported.
...And 3 more matches

Referer header: privacy and security concerns - Web security
this is becoming less useful in this context now that most of the web is using https, but it is still a worthy consideration.
...party content (e.g.
...eferrer on html elements that are in danger of leaking such information (such as <img> and <a>).
...And 3 more matches

OS.File for the main thread
rom values os.constants.libc.o_*.
... creation mode, as per libc function open.
...ser can read and write).
...And 2 more matches

JSS FAQ
jss frequently asked questions newsgroup: mozilla.dev.tech.crypto content: what versions of jdk and jce do you suggest?
... jss frequently asked questions newsgroup: mozilla.dev.tech.crypto content: what versions of jdk and jce do you suggest?
... org/mozilla/jss/pkix/crmf/certreqmsg.java org/mozilla/jss/pkix/crmf/certtemplate.java org/mozilla/jss/pkix/primitive/name.java org/mozilla/jss/provider/javax/crypto/jsssecretkeyfactoryspi.java org/mozilla/jss/util/utf8converter.java org/mozilla/jss/util/base64inputstream.java jss/samples/pqggen.java jss/samples/pkcs12.java if i don't call setcipherpolicy, is the domestic policy used by default?
...And 2 more matches

Handling Mozilla Security Bugs
s.
...duplicates are still considered separate as far as disclosure is concerned.
...e still considered separate as far as disclosure is concerned.
...And 2 more matches

nsICache
any.
...t's valid, you may write if it needs updating.
...ce.
...And 2 more matches

nsIPrincipal
ngerprint id of this principal's certificate.
...l's certificate.
... the pretty name for the certificate.
...And 2 more matches

Network request details - Firefox Developer Tools
and returns you to the list view.
... headers tab the headers tab has a toolbar, followed by three main sections.
...me: the scheme used in the url host: the server involved in the request filename: the full path to the file requested address: the ip address of the host the following information is shown in both the collapsed and the expanded states: status: the http response code for the request.
...And 2 more matches

HTMLIFrameElement - Web APIs
lean indicating whether the payment request api may be invoked inside a cross-origin iframe.
... a domstring that contains the uri of a long description of the frame.
... long description of the frame.
...And 2 more matches

RTCDtlsTransport - Web APIs
rtcpeerconnection.
...he other endpoint is able to negotiate.
...h endpoints are browsers, you can rest assured that bundling will be used.
...And 2 more matches

Using Web Workers - Web APIs
if you aren't careful.
...s to non-threadsafe components or the dom.
...ally hard to cause problems in your code.
...And 2 more matches

window.postMessage() - Web APIs
the window.postmessage() method safely enables cross-origin communication between window objects; e.g., between a page and a pop-up that it spawned, or between a page and an iframe embedded within it.
...other windows.
...and therefore it can intercept the data sent using postmessage.
...And 2 more matches

Making content editable - Developer guides
he time to update it to use the new behavior.
... to update it to use the new behavior.
...older firefox behavior with this line: document.execcommand("defaultparagraphseparator", false, "br"); security for security reasons, firefox doesn't let javascript code use clipboard related features (copy, paste, etc.) by default.
...And 2 more matches

<img>: The Image Embed element - HTML: Hypertext Markup Language
for accessibility — screen readers read this description out to their users so they know what the image means.
...ing is only deferred when javascript is enabled.
...on, by strategically placing images in a page's markup such that a server can track how many images are requested and when.
...And 2 more matches

CSP: block-all-mixed-content - HTTP
the http content-security-policy (csp) block-all-mixed-content directive prevents loading any assets over http when the page uses https.
...ontent.
... entire page is mixed content-free.
...And 2 more matches

CSP: require-sri-for - HTTP
the http content-security-policy require-sri-for directive instructs the client to require the use of subresource integrity for scripts or styles on the page.
... the http content-security-policy require-sri-for directive instructs the client to require the use of subresource integrity for scripts or styles on the page.
... the http content-security-policy require-sri-for directive instructs the client to require the use of subresource integrity for scripts or styles on the page.
...And 2 more matches

Privacy, permissions, and information security
both, since many of these features are used for both.
...n open standard for monitoring and auditing certificates, creating a database of public logs that can be used to help identify incorrect or malicious certificates content security policy provides the ability to define the extent to which a document's content can be accessed by other devices over the web; used in particular to prevent or mitigate attacks on the server feature policy lets web developers selectively enable, disable, and modify the behavior of certain features and apis both for a document and for subdocuments loaded in <iframe>s <iframe>'s allow attribute technically part of feature policy, the allow attribute on an <iframe> specifies which web features the document in the frame should be allowed to access http public key pinning (hpkp) ...
...for the current browser context transport layer security (tls); formerly known as secure sockets layer (ssl) tls provides security and privacy by encrypting data during transport over the network.
...And 2 more matches

Mozilla Crypto FAQ - Archive of obsolete content
s and the resulting advisory opinion issued by bxa in response to that request.
...and privacy issues.
...ip agre and marc rotenberg (ed.).
...ar (ed.).

CSP - MDN Web Docs Glossary: Definitions of Web-related terms
a csp (content security policy) is used to detect and mitigate certain types of website related attacks like xss and data injections.
... a csp (content security policy) is used to detect and mitigate certain types of website related attacks like xss and data injections.
... a csp (content security policy) is used to detect and mitigate certain types of website related attacks like xss and data injections.
... a csp (content security policy) is used to detect and mitigate certain types of website related attacks like xss and data injections.

Cookies Preferences in Mozilla
pecific, so not all of them may apply to you.
...lues given are for firefox 3.
...cable to older mozilla suite and seamonkey versions.) 4 = storage access policy: block cookies from trackers network.cookie.lifetimepolicy default value: 0 0 = accept cookies normally 1 = prompt for each cookie (prompting was removed in firefox 44) 2 = accept for current session only 3 = accept for n days network.cookie.lifetime.days default value: 90 only used if network.cookie.lifetimepolicy is set to 3 sets the number of days that the lifetime of cookies should be limited to.
...pt for each cookie (prompting was removed in firefox 44) 2 = accept for current session only 3 = accept for n days network.cookie.lifetime.days default value: 90 only used if network.cookie.lifetimepolicy is set to 3 sets the number of days that the lifetime of cookies should be limited to.

Creating localizable web applications
nk to indicate the language of the pages you link to if it is different from the user's current language.
... of the pages you link to if it is different from the user's current language.
...t going to be localized or are external to your web application.
... your web application.

NSS 3.31 release notes
ri object.
... macros that start with pk11uri_qattr_ for query attributes defined in rfc7512.
...anged to trim the requested range to the overlap with a systemwide crypto policy, if configured.
...sed to query the overlap between the library's supported range of tls versions and the systemwide policy.

SSL functions
he old ssl reference.
...r) link for each function provides access to the function definition, prototype definition, and source code references.
...tion definition, prototype definition, and source code references.
... and later nss_setfrancepolicy mxr 3.2 and later nssssl_versioncheck mxr 3.2.1 and later ssl_authcertificate mxr 3.2 and later ssl_authcertificatehook mxr 3.2 and later ssl_badcerthook mxr 3.2 and later ssl_certdbhandleset mxr 3.2 and later ssl_canbypass mxr 3.11.7 and later ssl_cipherpolicyget mxr 3.2 and later ssl_cipherpolicyset mxr 3.2 and later ssl_cipherprefget mxr 3.2 and later ssl_cipherprefgetdefault mxr 3.2 and later ssl_cipherprefset mxr 3.2 and later ssl_cipherprefsetdefault mxr 3.2 and later ssl_clearsessioncache mxr 3.2 and later ssl_configmpserversidcache mxr ...

Index
ng to nsihttpchannel allows response headers to be retrieved for the corresponding http transaction.
...entsink channels, interfaces, interfaces:scriptable, xpcom, xpcom interface reference channels will try to get this interface from a channel's notificationcallbacks or, if not available there, from the loadgroup's notificationcallbacks.
...ace reference content preferences allow the application to associate arbitrary data, or "preferences", with specific domains, or web "content".
...b "content".

imgILoader
mage/loader;1"] .getservice(components.interfaces.imgiloader); method overview imgirequest loadimage(in nsiuri auri, in nsiuri ainitialdocumenturl, in nsiuri areferreruri, in nsiprincipal aloadingprincipal, in nsiloadgroup aloadgroup, in imgidecoderobserver aobserver, in nsisupports acx, in nsloadflags aloadflags, in nsisupports cachekey, in imgirequest arequest, in nsichannelpolicy channelpolicy); imgirequest loadimagewithchannel(in nsichannel achannel, in imgidecoderobserver aobserver, in nsisupports cx, out nsistreamlistener alistener); boolean supportimagewithmimetype(in string mimetype); constants constant value description load_cors_anonymous 1 << 16 load_cors_use_credentials 1 << 17 methods loadimage() start the load and decode of an image.
...tials 1 << 17 methods loadimage() start the load and decode of an image.
... methods loadimage() start the load and decode of an image.
... the observer (may be null) acx some random data.

nsICacheEntryDescriptor
y.
...e content-length specified in the http header for this entry.
...ified in the http header for this entry.
...his entry.

performance.now() - Web APIs
ed performance.now(); // 8865400 // 8866200 // 8866700 // ...
...// 8866200 // 8866700 // ...
...efox, you can also enable privacy.resistfingerprinting — this changes the precision to 100ms or the value of privacy.resistfingerprinting.reducetimerprecision.microseconds, whichever is larger.
...ngerprinting — this changes the precision to 100ms or the value of privacy.resistfingerprinting.reducetimerprecision.microseconds, whichever is larger.

<a>: The Anchor element - HTML: Hypertext Markup Language
wsers may not support other url schemes, web sites can with registerprotocolhandler() hreflang hints at the human language of the linked url.
...ler() hreflang hints at the human language of the linked url.
...ive elements, like links, placed in close visual proximity should have space separating them.
...th motor control issues, who may otherwise accidentally activate the wrong interactive content.

<area> - HTML: Hypertext Markup Language
nt does not represent a hyperlink.
...t by the browser (in the background).
...ples <map name="primary"> <area shape="circle" coords="75,75,75" href="left.html" alt="click to go left"> <area shape="circle" coords="275,75,75" href="right.html" alt="click to go right"> </map> <img usemap="#primary" src="https://udn.realityripple.com/samples/6a/7e559101b3.png" alt="350 x 150 pic"> result specifications specification status comment referrer policythe definition of 'referrerpolicy attribute' in that specification.
..."circle" coords="275,75,75" href="right.html" alt="click to go right"> </map> <img usemap="#primary" src="https://udn.realityripple.com/samples/6a/7e559101b3.png" alt="350 x 150 pic"> result specifications specification status comment referrer policythe definition of 'referrerpolicy attribute' in that specification.

web-share - HTTP
the http feature-policy header web-share directive controls controls whether the current document is allowed to use the navigator.share() of web share api to share text, links, images, and other content to arbitrary destiations of user's choice.
... the http feature-policy header web-share directive controls controls whether the current document is allowed to use the navigator.share() of web share api to share text, links, images, and other content to arbitrary destiations of user's choice.
... allowed by default in top-level browsing contexts and all nested browsing contexts (iframes).
...allowed by default in top-level browsing contexts and in nested browsing contexts (iframes) in the same origin.

Network Error Logging - HTTP
eb applications opt in to this behaviour with the nel header, which is a json-encoded object: nel: { "report_to": "nel", "max_age": 31556952 } an origin considered secure by the browser is required.
...considered secure by the browser is required.
...ed.
...header: report_to the reporting api group to send network error reports to (see below).

SharedArrayBuffer - JavaScript
re approach has been standardized to re-enable shared memory.
...stmessage() will no longer throw for sharedarraybuffer objects and shared memory across threads will be available: as a baseline requirement, your document needs to be in a secure context.
...ads will be available: as a baseline requirement, your document needs to be in a secure context.
...irement, your document needs to be in a secure context.

Java in Firefox Extensions - Archive of obsolete content
ository/jav...xtensionutils/ ) build and add references leading to this jar and all other jars in your extension within an array of java.net.url's, pass to java.net.urlclassloader to get a class loader, and finally pass the classloader and array to a function which gives the necessary privileges: // this function will be called to give the necessary privileges to your jar files // however, the policy never comes into play, because // (1) adding permissions doesn't add to the policy itself, and // (2) addurl alone does not set the grant codebase function policyadd (loader, urls) { try { //if have trouble with the policy try changing it to //edu.mit.simile.javafirefoxextensionutils.urlsetpolicy var str = 'edu.mit.simile.javafirefoxextensionutils.urlsetpo...
...lay, because // (1) adding permissions doesn't add to the policy itself, and // (2) addurl alone does not set the grant codebase function policyadd (loader, urls) { try { //if have trouble with the policy try changing it to //edu.mit.simile.javafirefoxextensionutils.urlsetpolicy var str = 'edu.mit.simile.javafirefoxextensionutils.urlsetpolicy'; var policyclass = java.lang.class.forname( str, true, loader ); var policy = policyclass.newinstance(); policy.setouterpolicy(java.security.policy.getpolicy()); java.security.policy.setpolicy(policy); policy.addpermission(new java.security.allpermission()); for (var j=0; j < urls.length; j++) { policy.ad...
...va/testjava.jar"; // seems you don't actually have to replace the backslashes as they work as well var urlarray = []; // build a regular javascript array (liveconnect will auto-convert to a java array) urlarray[0] = new java.net.url(myjarpath); urlarray[1] = new java.net.url(classloaderjarpath); var cl = java.net.urlclassloader.newinstance(urlarray); //set security policies using the above policyadd() function policyadd(cl, urlarray); now you can begin using liveconnect, including referencing the classes in your jars.

Safely loading URIs - Archive of obsolete content
the data you can get your hands on.
...oaduri to checkloaduristr.
...eckloaduriwithprincipal is not scriptable in gecko 1.8, so extensions are not able to use it.

Supporting private browsing mode - Archive of obsolete content
rgba(255,255,255,.5) rgba(43,8,65,.9); } this snippet is pulled directly from the standard skin; you can customize as you see fit.
... in effect by using the npn_getvalue() function to check the current value of the npnvprivatemodebool variable.
...le.

The new nsString class implementation (1999) - Archive of obsolete content
it suffers from a few implementation details which need to be addressed and that are the subject of this document.
...terface notable features of the new nsstrimpl implementation are: intrinsic support for 1 and 2 byte character widths provides automatic conversion between strings with different character sizes inviolate base structure eliminates class fragility problem; safe across dll boundaries offers c-style function api to manipulate nsstrimpl offers simple memory allocator api for specialized memory policy shares binary format with bstring coming soon: a new xpcom (nsistring) interface non-templatized; this is a requirement for gecko very efficient buffer manipulation architecture the fundamental data type in the new architecture is struct nsstrimpl, given below: struct nsstrimpl { print32 mlength; void* mbuffer; print32 mcapacity; char mcharsize; char munused; // and now ...
... in the new prototype nsstrimpl and nsstring classes, the allocator is an intrinsic member installed during construction of the string (by default they share a global allocator).

Security Controls - Archive of obsolete content
of information system security.
...ly implemented and executed by the system through the system's hardware, software, or firmware.
...y policy is a management control, but its security requirements are implemented by people (operational controls) and systems (technical controls).

Audio for Web games - Game development
difficult platforms to provide web audio support for are mobile platforms.
...iming them as soon as something like a start button is pressed.
...tton'); // load file loadfile(anchor.href).then((track) => { // set loading to false el.dataset.loading = 'false'; // hide loading text loadtext.style.display = 'none'; // show button playbutton.style.display = 'inline-block'; // allow play on click playbutton.addeventlistener('click', function() { // check if context is in suspended state (autoplay policy) if (audioctx.state === 'suspended') { audioctx.resume(); } playtrack(track); playbutton.dataset.playing = true; }) }) }) note: you can see this demo in action here and view the source code here.

What’s in the head? Metadata in HTML - Learn web development
ipad's home screen.
... about implementing all these types of icon right now — this is a fairly advanced feature, and you won't be expected to have knowledge of this to progress through the course.
...o have knowledge of this to progress through the course.

Introduction to web APIs - Learn web development
lume'); const audiosource = audioctx.createmediaelementsource(audioelement); next up we include a couple of event handlers that serve to toggle between play and pause when the button is pressed and reset the display back to the beginning when the song has finished playing: // play/pause audio playbtn.addeventlistener('click', function() { // check if context is in suspended state (autoplay policy) if (audioctx.state === 'suspended') { audioctx.resume(); } // if track is stopped, play it if (this.getattribute('class') === 'paused') { audioelement.play(); this.setattribute('class', 'playing'); this.textcontent = 'pause' // if track is playing, stop it } else if (this.getattribute('class') === 'playing') { audioelement.pause(); ...
...ble after the load event has fired (unless an error occurred), so we save the response containing the returned json in the superheroes variable, then pass it to two different functions for further processing.
...https due to them transmitting potentially sensitive data (examples include service workers and push).

Mozilla’s UAAG evaluation report
s to "open unrequested windows" we do not have a strategy to "alert the user and allow the user to open it on demand" we do not have exposed prefs for all of our popup control options.
... demand" we do not have exposed prefs for all of our popup control options.
... prefs" lines that can be added to the user's prefs.js file, for controlling popup behavior: turn window.open off for particular sites: user_pref("capability.policy.popupsites.sites", "http://www.annoyingsite1.com http://www.popupsite2.com"); user_pref("capability.policy.popupsites.windowinternal.open", "noaccess"); or turn it off everywhere: user_pref("capability.policy.default.windowinternal.open", "noaccess"); override popping up new windows on target=anything: user_pref("browser.target_new_blocked", true); override popup windows at beginning of new page load (blocks most popup advertisements): user_pref("dom.disable_open_during_load", true); 5.4 selection and focus in viewport.

Experimental features in Firefox
ommon use cases for these properties don't work, so they're both disabled by default.
...on't work, so they're both disabled by default.
...ed (autoplay is allowed but only with no—or muted—audio), and disallowed (autoplay is not allowed at this time).

Process scripts
content process, in multiple scopes that are insulated from each other.
...scopes that are insulated from each other.
...rately into all open tabs.

Midas
s in a list item, the item will bump up a level in the list or break out of the list entirely.
...list item, the item will bump up a level in the list or break out of the list entirely.
... break out of the list entirely.

Certificate functions
and later cert_encodecrldistributionpoints mxr 3.5 and later cert_encodegeneralname mxr 3.4 and later cert_encodeinfoaccessextension mxr 3.12 and later cert_encodeinhibitanyextension mxr 3.12 and later cert_encodenoticereference mxr 3.12 and later cert_encodeocsprequest mxr 3.6 and later cert_encodepolicyconstraintsextension mxr 3.12 and later cert_encodepolicymappingextension mxr 3.12 and later cert_encodesubjectkeyid mxr 3.12 and later cert_encodeusernotice mxr 3.12 and later cert_extractpublickey mxr 3.2 and later cert_findcertbyname mxr 3.2 and later cert_findcrlentryreasonexten mxr 3.12 and later ...
... mxr 3.2 and later cert_getcertificatenames mxr 3.10 and later cert_getcertificaterequestextensions mxr 3.10 and later cert_getcertissuerandsn mxr 3.2 and later cert_getcertnicknames mxr 3.2 and later cert_getcerttrust mxr 3.2 and later cert_getcertuid mxr 3.2 and later cert_getclassicocspdisabledpolicy mxr 3.12 and later cert_getclassicocspenabledhardfailurepolicy mxr 3.12 and later cert_getclassicocspenabledsoftfailurepolicy mxr 3.12 and later cert_getcommonname mxr 3.2 and later cert_getcountryname mxr 3.2 and later cert_getdbcontentversion mxr 3.2 and later cert_getdefaultcertdb mxr 3.2 and later ...
...0 and later cert_getocspresponsestatus mxr 3.6 and later cert_getocspstatusforcertid mxr 3.6 and later cert_getoidstring mxr 3.9 and later cert_getorgname mxr 3.2 and later cert_getorgunitname mxr 3.2 and later cert_getocspauthorityinfoaccesslocation mxr 3.4 and later cert_getpkixverifynistrevocationpolicy mxr 3.12 and later cert_getprevgeneralname mxr 3.10 and later cert_getprevnameconstraint mxr 3.10 and later cert_getsloptime mxr 3.2 and later cert_getsslcacerts mxr 3.2 and later cert_getstatename mxr 3.2 and later cert_getusepkixforvalidation mxr 3.12 and later cert_getvaliddnspatternsfromce...

NSS 3.30 release notes
portable runtime (nspr); 4.13.1 or newer.
...for use in wrapping session ticket keys, used by the server.
...iferfam.h pkcs12_aes_cbc_128, pkcs12_aes_cbc_192, pkcs12_aes_cbc_256 - cipher family identifiers corresponding to the pkcs#5 v2.1 aes based encryption schemes used in the pkcs#12 support in nss in pkcs11n.h cka_nss_mozilla_ca_policy - identifier for a boolean pkcs#11 attribute, that should be set to true, if a ca is present because of it's acceptance according to the mozilla ca policy notable changes in nss 3.30 the tls server code has been enhanced to support session tickets when no rsa certificate (e.g.

NSS tools : certutil
e described in rfc 5280.
...rtificate extensions are described in rfc 5280.
...ertificate extensions are described in rfc 5280.

certutil
x.509 certificate extensions are described in rfc 5280.
...cate.
...9 certificate extensions are described in rfc 5280.

JSAPI User Guide
ke from eating a mouse is to watch the snake constantly, and if it tries to eat the mouse, intervene.
...ges ("content") have very limited access.
...des a common security interface, but the actual security implementation is up to you.

nsICacheSession
ait for the cache entry when it is in use and waits for validation.
... doomentry( in acstring key, in nsicachelistener listener ); parameters key the key for cache entry.
...ries for this session's clientid according to its storagepolicy.

Using Fetch - Web APIs
), and it will only reject on network failure or if anything prevented the request from completing.
...response, not the actual json.
... put, delete, etc.

Fullscreen API - Web APIs
or element when it transitions into or out of full-screen mode.
... controlling access the availability of full-screen mode can be controlled using feature policy.
... full-screen mode can be controlled using feature policy.

HTMLIFrameElement.csp - Web APIs
the csp property of the htmliframeelement interface specifies the content security policy that an embedded document must agree to enforce upon itself.
... the csp property of the htmliframeelement interface specifies the content security policy that an embedded document must agree to enforce upon itself.
... the csp property of the htmliframeelement interface specifies the content security policy that an embedded document must agree to enforce upon itself.

HTMLLinkElement - Web APIs
whether the link is disabled; currently only used with style sheet links.
...ith style sheet links.
... specifications specification status comment preload candidate recommendation defines <link rel="preload">, and the as property.

Browser storage limits and eviction criteria - Web APIs
for a long time.
...it mentioned above.
...limit would also be 8 mb.

Navigator - Web APIs
vent screen from dimming, turning off, or showing a screen saver.
...bkitnotification returns a notification object you can use to deliver notifications to the user from your web application.
... returns a notification object you can use to deliver notifications to the user from your web application.

RTCIceCandidate.address - Web APIs
ally reveal the address to the user.
...lay candidates only.
...ress from being exposed, but reduces the pool of available candidates to choose from.

Reporting API - Web APIs
the reporting api provides a generic reporting mechanism for web applications to use to make reports available based on various platform features (for example content security policy, feature-policy, or feature deprecation reports) in a consistent manner.
...s platform features (for example content security policy, feature-policy, or feature deprecation reports) in a consistent manner.
...mple content security policy, feature-policy, or feature deprecation reports) in a consistent manner.

Using the Screen Capture API - Web APIs
{ border: 1px solid #999; width: 98%; max-width: 860px; } .error { color: red; } .warn { color: orange; } .info { color: darkgreen; } result the final product looks like this.
... color: orange; } .info { color: darkgreen; } result the final product looks like this.
...eature policy is enabled, you will need the display-capture permission.

Screen Wake Lock API - Web APIs
sider using background fetch.
...e server, consider using background sync.
...uments can acquire screen wake locks and previously acquired locks are automatically released when document becomes inactive.

SharedWorker() - Web APIs
the sharedworker() constructor creates a sharedworker object that executes the script at the specified url.
...uri is of the same origin or not.
...is omit (no credentials required).

Storage Access API - Web APIs
tent that requires access to its first-party storage.
... in first-party storage, and will require the user to sign in on each site separately (or completely break) if those cookies are not available.
...ts are phased out after 30 calendar days passing, whereas in safari the storage access grants are phased out after 30 days of browser usage passed without user interaction.

Web Audio API best practices - Web APIs
ne.js is a great library.
...ng capabilities, synths, and effects, and intuitive musical abstractions built on top of the web audio api.
...o suspended and it will need to be started after user interaction.

WindowOrWorkerGlobalScope.fetch() - Web APIs
u might want to fetch resources.
...or the request.
... redirect mode to use: follow (automatically follow redirects), error (abort with an error if a redirect occurs), or manual (handle redirects manually).

Worker() - Web APIs
the worker() constructor creates a worker object that executes the script at the specified url.
...ent among browser manufacturers about whether a data uri is of the same origin or not.
...r if type is classic, the default used is omit (no credentials required).

Using XMLHttpRequest - Web APIs
s indexed by url, this causes every request to be unique, thereby bypassing the cache.
...d by url, this causes every request to be unique, thereby bypassing the cache.
...st to be unique, thereby bypassing the cache.

HTML attribute reference - HTML: Hypertext Markup Language
board shortcut to activate or add focus to the element.
...context menu.
...what can be entered in the field.

<style>: The Style Information element - HTML: Hypertext Markup Language
than the empty string or text/css are not used.
...on to include this attribute in modern web documents.
...dia the style should be applied to.

Evolution of HTTP - HTTP
al of these apis created extensions, mostly new specific http headers, to the http protocol for specific purposes: server-sent events, where the server can push occasional messages to the browser.
...t up by upgrading an existing http connection.
... creation of http!

CORS errors - HTTP
cross-origin resource sharing (cors) is a standard that allows a server to relax the same-origin policy.
...an embeddable service, it may be necessary to relax certain restrictions.
...t and why.

SameSite cookies - HTTP
cure sites (http:) can't set cookies with the secure directive.
...or samesite to your cookies and so the following message might appear in your console: some cookies are misusing the “samesite“ attribute, so it won’t work as expected.
...ecause it is missing a “samesite” attribute, and “samesite=lax” is the default value for this attribute.

XPCOM Objects - Archive of obsolete content
only thing you may need to change here is when you need to use the category manager.
...nregisterself methods: registerself : function(acompmgr, alocation, aloaderstr, atype) { let categorymanager = cc[@mozilla.org/categorymanager;1].getservice(ci.nsicategorymanager); acompmgr.queryinterface(ci.nsicomponentregistrar); acompmgr.registerfactorylocation( class_id, class_name, contract_id, alocation, aloaderstr, atype); categorymanager.addcategoryentry( "content-policy", "xulschool hello world", contract_id, true, true); }, in this case the component would need to implement nsicontentpolicy.

Index of archived content - Archive of obsolete content
pydom rdf api rdf datasource how-to reading textual data remote xul remote debugging rsyncing the cvs repository running windows debug builds downloaded from tinderbox sxsw 2007 presentations safe browsing safe browsing: design documentation safely loading uris same origin policy for xbl space manager detailed design space manager high level design standalone xpcom standard makefile header static analysis for windows code under linux stress testing string quick reference string rosetta stone structure of an installable bundle supporting per-window private browsing ...
... cross-browser tooltips environment variables affecting crash reporting io guide images, tables, and mysterious gaps installing plugins to gecko embedding browsers on windows mcd, mission control desktop, aka autoconfig monitoring wifi access points no proxy for configuration notes on html reflow same-origin policy for file: uris source navigator source code directories overview using xml data islands in mozilla using content preferences visualizing an audio spectrum working with bfcache cert_override.txt mozilla release faq newsgroup summaries format mozilla.dev.a...

2006-10-20 - Archive of obsolete content
discussions i wanna make an addon for firefox a commonly asked question in many newsgroups.
... requester here change download action for .rdp files on windows and os x a question regarding enabling firefox to associate .rdp files with microsoft remote desktop client so that the correct application opens the files automatically.

2006-11-10 - Archive of obsolete content
ozilla.dev.l10n - november 10, 2006 announcements seamonkey 1.0.5 in belarusian belarusian [be-by] localization for seamonkey 1.0.5 is available now.
...monkey 1.0.5 in belarusian belarusian [be-by] localization for seamonkey 1.0.5 is available now.

Navigation directive - MDN Web Docs Glossary: Definitions of Web-related terms
csp navigation directives are used in a content-security-policy header and govern to which location a user can navigate to or submit a form to, for example.
...itiate navigation by any means, including <form> (if form-action is not specified), <a>, window.location, window.open, etc.

From object to iframe — other embedding technologies - Learn web development
arameters, as shown in our previous example.
..., and use javascript to turn off sandboxing altogether.

Index
ests the steps you might want to follow, as well as offering some pointers to a suitable timeline.
...refox, guide, tutorial, add-on the theme generator on addons.mozilla.org (amo) guides you through the process of creating a theme for firefox.

Message manager overview
rom firefox 38 onwards, they also enable code running in the parent process to load process scripts into the child process.
...g ppmm, then by the gppmm.

WebRequest.jsm
the webrequest module is new in firefox 41.
... the webrequest module is new in firefox 41.

Deprecated SSL functions
e code references.
... function name/documentation source code replacement in nss 3.2 ssl_enable mxr ssl_optionset ssl_enablecipher mxr ssl_cipherprefsetdefault ssl_enabledefault mxr ssl_optionsetdefault ssl_redohandshake mxr ssl_rehandshake ssl_setpolicy mxr ssl_cipherpolicyset ...

NSS 3.15.2 release notes
ger accepted for ocsp or crls, consistent with their handling for general certificate signatures.
...atures.

NSS 3.26 release notes
cape portable runtime (nspr) 4.12 or newer.
...ilable on ftp.mozilla.org for secure https download: source tarballs: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/nss_3_26_rtm/src/ new in nss 3.26 new functionality the selfserv test utility has been enhanced to support alpn (http/1.1) and 0-rtt added support for the system-wide crypto policy available on fedora linux, see http://fedoraproject.org/wiki/changes/cryptopolicy introduced build flag nss_disable_libpkix which allows compilation of nss without the libpkix library notable changes in nss 3.26 the following ca certificate was added cn = isrg root x1 sha-256 fingerprint: 96:bc:ec:06:26:49:76:f3:74:60:77:9a:cf:28:c5:a7:cf:e8:a3:c0:aa:e1:1a:8f:fc:ee:05:c0:bd:df:08:c6 npn is disabled, and alpn is enabled by default the nss ...

NSS 3.39 release notes
y the tstclnt and selfserv utilities added support for configuring the enabled tls signature schemes using the -j parameter.
... for configuring the enabled tls signature schemes using the -j parameter.

OLD SSL Reference
etdefault ssl_cipherprefsetdefault ssl_cipherprefgetdefault ssl_clearsessioncache ssl_configserversessionidcache initializing multi-processing with a shared ssl server cache ssl_configmpserversidcache ssl_inheritmpserversidcache ssl export policy functions nss_setdomesticpolicy nss_setexportpolicy nss_setfrancepolicy ssl_cipherpolicyset ssl_cipherpolicyget ssl configuration functions ssl configuration ssl_importfd ssl_optionset ...
...ions ssl_forcehandshake ssl_rehandshake ssl_resethandshake nss shutdown function nss_shutdown deprecated functions ssl_enabledefault ssl_enable ssl_enablecipher ssl_setpolicy ssl_redohandshake chapter 5 certificate functions this chapter describes the functions and related types used to work with a certificate database such as the cert7.db database provided with communicator.

sslerr.html
the application has attempted to configure ssl to use an unknown cipher suite.
... failed because the pkcs#11 token is not logged in." sec_error_ocsp_responder_cert_invalid -8036 "the configured ocsp responder's certificate is invalid." sec_error_ocsp_bad_signature -8035 "ocsp response has an invalid signature." sec_error_out_of_search_limits -8034 "certification validation search is out of search limits." sec_error_invalid_policy_mapping -8033 "policy mapping contains any-policy." sec_error_policy_validation_failed -8032 "certificate chain fails policy validation." sec_error_unknown_aia_location_type -8031 "unknown location type in certificate aia extension." sec_error_bad_http_response -8030 "server returned a bad http response." sec_error_bad_ldap_response -...

Rhino shell
120, 130, 140, 150, 160 or 170.
...nuations enable experimental support for continuations and set the optimization level to -1 to force interpretation mode.

Index
time jsapi reference, needscontent, needsupdate, spidermonkey in the jsapi, jsruntime is the top-level object that represents an instance of the javascript engine.
...ey in the jsapi, jsruntime is the top-level object that represents an instance of the javascript engine.

JSCheckAccessOp
ption, js_true on success with obj[id]'s stored value in *vp.
...lue in *vp.

JS_GetSecurityCallbacks
cks * js_setruntimesecuritycallbacks(jsruntime *rt, jssecuritycallbacks *callbacks); name type description rt jsruntime * a runtime to get/set the security callbacks.
... in spidermonkey 1.8.5 jssubsumesop subsumes; // added in spidermonkey 31 jscheckaccessop checkobjectaccess; // obsolete since jsapi 29 jsprincipalstranscoder principalstranscoder; // obsolete since jsapi 13 jsobjectprincipalsfinder findobjectprincipals; // obsolete since jsapi 13 }; name type description contentsecuritypolicyallows jscspevalchecker a pointer to the function which checks if a csp instance wants to disable eval() and friends.

Shell global objects
k that stack invariants hold.
...jscompileoption enum to a number.

Setting up an update server
e update directory: const {fileutils} = chromeutils.import("resource://gre/modules/fileutils.jsm"); fileutils.getdir("updrootd", [], false).path once you have determined the update directory, close firefox, browse to the directory and remove the subdirectory called updates.
...ectory: const {fileutils} = chromeutils.import("resource://gre/modules/fileutils.jsm"); fileutils.getdir("updrootd", [], false).path once you have determined the update directory, close firefox, browse to the directory and remove the subdirectory called updates.

Gecko object attributes
dered important enough to automatically present.
...y the current changes are not yet complete.

Starting WebLock
stuff between the curly braces) defines the methods and attributes of our interface.
...n switching a profile.

nsIDownloadManager
ocked_parental 6 the download has been blocked, either by parental controls or the virus scanner determining that a file is infected and cannot be cleaned.
...by parental controls or the virus scanner determining that a file is infected and cannot be cleaned.

XPCOM Interface Reference
inputstreamnsibinaryoutputstreamnsiblocklistpromptnsiblocklistservicensiboxobjectnsibrowserboxobjectnsibrowserhistorynsibrowsersearchservicensicrlinfonsicrlmanagernsicachensicachedeviceinfonsicacheentrydescriptornsicacheentryinfonsicachelistenernsicachemetadatavisitornsicacheservicensicachesessionnsicachevisitornsicachingchannelnsicancelablensicategorymanagernsichannelnsichanneleventsinknsichannelpolicynsicharsetresolvernsichromeframemessagemanagernsichromeregistrynsiclassinfonsiclipboardnsiclipboardcommandsnsiclipboarddragdrophooklistnsiclipboarddragdrophooksnsiclipboardhelpernsiclipboardownernsicollectionnsicommandcontrollernsicommandlinensicommandlinehandlernsicommandlinerunnernsicomponentmanagernsicomponentregistrarnsicompositionstringsynthesizernsiconsolelistenernsiconsolemessagensiconsoles...
...ernsiclipboardownernsicollectionnsicommandcontrollernsicommandlinensicommandlinehandlernsicommandlinerunnernsicomponentmanagernsicomponentregistrarnsicompositionstringsynthesizernsiconsolelistenernsiconsolemessagensiconsoleservicensicontainerboxobjectnsicontentframemessagemanagernsicontentprefnsicontentprefcallback2nsicontentprefobservernsicontentprefservicensicontentprefservice2nsicontentsecuritypolicynsicontentsniffernsicontentviewnsicontentviewmanagernsicontentviewernsicontrollernsicontrollersnsiconverterinputstreamnsiconverteroutputstreamnsicookiensicookie2nsicookieacceptdialognsicookieconsentnsicookiemanagernsicookiemanager2nsicookiepermissionnsicookiepromptservicensicookieservicensicookiestoragensicrashreporternsicryptohmacnsicryptohashnsicurrentcharsetlistenernsicyclecollectorlistenernsid...

Index
play remote content in a tab, which users can browse in (mostly) the same way as with a browser.
...s with a browser.

AbsoluteOrientationSensor - Web APIs
the absoluteorientationsensor constructor creates a new absoluteorientationsensor object which describes the device's physical orientation in relation to the earth's reference coordinate system.
... the absoluteorientationsensor constructor creates a new absoluteorientationsensor object which describes the device's physical orientation in relation to the earth's reference coordinate system.

AbsoluteOrientationSensor - Web APIs
the absoluteorientationsensor interface of the sensor apis describes the device's physical orientation in relation to the earth's reference coordinate system.
...n relation to the earth's reference coordinate system.

Accelerometer.Accelerometer() - Web APIs
the accelerometer constructor creates a new accelerometer object which returns the acceleration of the device along all three axes at the time it is read.
... the accelerometer constructor creates a new accelerometer object which returns the acceleration of the device along all three axes at the time it is read.

Accelerometer.x - Web APIs
the x read-only property of the accelerometer interface returns a double precision integer containing the acceleration of the device along the its x axis.
... the x read-only property of the accelerometer interface returns a double precision integer containing the acceleration of the device along the its x axis.

Accelerometer.y - Web APIs
the y read-only property of the accelerometer interface returns a double precision integer containing the acceleration of the device along the its y axis.
... the y read-only property of the accelerometer interface returns a double precision integer containing the acceleration of the device along the its y axis.

Accelerometer.z - Web APIs
the z read-only property of the accelerometer interface returns a double precision integer containing the acceleration of the device along the its z axis.
... the z read-only property of the accelerometer interface returns a double precision integer containing the acceleration of the device along the its z axis.

Accelerometer - Web APIs
the accelerometer interface of the sensor apis provides on each reading the acceleration applied to the device along all three axes.
...ides on each reading the acceleration applied to the device along all three axes.

AmbientLightSensor.AmbientLightSensor() - Web APIs
the ambinentlightsensor() constructor creates a new ambientlightsensor object, which returns the current light level or illuminance of the ambient light around the hosting device.
... the ambinentlightsensor() constructor creates a new ambientlightsensor object, which returns the current light level or illuminance of the ambient light around the hosting device.

AmbientLightSensor.illuminance - Web APIs
the illuminance property of the ambientlightsensor interface returns the current light level in lux of the ambient light level around the hosting device.
... the illuminance property of the ambientlightsensor interface returns the current light level in lux of the ambient light level around the hosting device.

AmbientLightSensor - Web APIs
the ambientlightsensor interface of the the sensor apis returns the current light level or illuminance of the ambient light around the hosting device.
...urrent light level or illuminance of the ambient light around the hosting device.

CloseEvent - Web APIs
1006 abnormal closure reserved.
...th no close frame being sent) when a status code is expected.

Document.domain - Web APIs
the domain property of the document interface gets/sets the domain portion of the origin of the current document, as used by the same origin policy.
...cument's origin.

Document - Web APIs
style sheet is changed by setting the value of selectedstylesheetset.
...value of selectedstylesheetset.

Element.requestFullscreen() - Web APIs
rejection handler receives one of the following exception values: typeerror the typeerror exception may be delivered in any of the following situations: the document containing the element isn't fully active; that is, it's not the current active document.
...es compatible elements an element that you wish to place into full-screen mode has to meet a small number of simple requirements: it must be one of the standard html elements or <svg> or <math>.

Introduction to the File and Directory Entries API - Web APIs
api) the input element (to programmatically obtain a list of files from the element) the file and directory entries api is case sensitive the filesystem api is case-sensitive, and case-preserving.
...ity reasons, browsers impose restrictions on file access.

Gyroscope.Gyroscope() - Web APIs
the gyroscope constructor creates a new gyroscope object which provides on each reading the angular velocity of the device along all three axes.
... the gyroscope constructor creates a new gyroscope object which provides on each reading the angular velocity of the device along all three axes.

Gyroscope.x - Web APIs
the x read-only property of the gyroscope interface returns a double precision integer containing the angular velocity of the device along the its x axis.
... the x read-only property of the gyroscope interface returns a double precision integer containing the angular velocity of the device along the its x axis.

Gyroscope.y - Web APIs
the y read-only property of the gyroscope interface returns a double precision integer containing the angular velocity of the device along the its y axis.
... the y read-only property of the gyroscope interface returns a double precision integer containing the angular velocity of the device along the its y axis.

Gyroscope.z - Web APIs
the z read-only property of the gyroscope interface returns a double precision integer containing the angular velocity of the device along the its z axis.
... the z read-only property of the gyroscope interface returns a double precision integer containing the angular velocity of the device along the its z axis.

Gyroscope - Web APIs
the gyroscope interface of the sensor apis provides on each reading the angular velocity of the device along all three axes.
...nsor apis provides on each reading the angular velocity of the device along all three axes.

HTMLAnchorElement - Web APIs
lhyperlinkelementutils.pathname is a usvstring representing the path name component, if any, of the referenced url.
...resenting the path name component, if any, of the referenced url.

HTMLAreaElement - Web APIs
ort.
...tring containing the path name component, if any, of the referenced url.

HTMLImageElement - Web APIs
if it is available; else, it shows 0.
... the height the image would be if it were rendered at its natural full size.

HTMLScriptElement - Web APIs
ocument.write() method, <script> elements execute (typically synchronously), but when inserted using innerhtml or outerhtml, they do not execute at all.
... (typically synchronously), but when inserted using innerhtml or outerhtml, they do not execute at all.

Basic concepts - Web APIs
bjects used by indexeddb.
...u are not familiar with object-oriented database management systems, read the wikipedia article on object database.

LinearAccelerationSensor.LinearAccelerationSensor() - Web APIs
the linearaccelerationsensor constructor creates a new linearaccelerationsensor object which provides on each reading the acceleration applied to the device along all three axes, but without the contribution of gravity.
...lerationsensor constructor creates a new linearaccelerationsensor object which provides on each reading the acceleration applied to the device along all three axes, but without the contribution of gravity.

LinearAccelerationSensor.x - Web APIs
the x read-only property of the linearaccelerationsensor interface returns a double precision integer containing the linear acceleration of the device along the device's x axis.
... the x read-only property of the linearaccelerationsensor interface returns a double precision integer containing the linear acceleration of the device along the device's x axis.

LinearAccelerationSensor.y - Web APIs
the y read-only property of the linearaccelerationsensor interface returns a double precision integer containing the acceleration of the device along the device's y axis.
... the y read-only property of the linearaccelerationsensor interface returns a double precision integer containing the acceleration of the device along the device's y axis.

LinearAccelerationSensor.z - Web APIs
the z read-only property of the linearaccelerationsensor interface returns a double precision integer containing the acceleration of the device along the device's z axis.
... the z read-only property of the linearaccelerationsensor interface returns a double precision integer containing the acceleration of the device along the device's z axis.

LinearAccelerationSensor - Web APIs
the linearaccelerationsensor interface of the sensor apis provides on each reading the acceleration applied to the device along all three axes, but without the contribution of gravity.
...on applied to the device along all three axes, but without the contribution of gravity.

Magnetometer.Magnetometer() - Web APIs
the magnetometer constructor creates a new magnetometer object which returns information about the magnetic field as detected by a device’s primary magnetometer sensor.
... the magnetometer constructor creates a new magnetometer object which returns information about the magnetic field as detected by a device’s primary magnetometer sensor.

Magnetometer.x - Web APIs
the x read-only property of the magnetometer interface returns a double precision integer containing the magnetic field around the device's x axis.
... the x read-only property of the magnetometer interface returns a double precision integer containing the magnetic field around the device's x axis.

Magnetometer.y - Web APIs
the y read-only property of the magnetometer interface returns a double precision integer containing the magnetic field around the device's y axis.
... the y read-only property of the magnetometer interface returns a double precision integer containing the magnetic field around the device's y axis.

Magnetometer.z - Web APIs
the z read-only property of the magnetometer interface returns a double-precision integer containing the magnetic field around the device's z axis.
... the z read-only property of the magnetometer interface returns a double-precision integer containing the magnetic field around the device's z axis.

Magnetometer - Web APIs
the magnetometer interface of the sensor apis provides information about the magnetic field as detected by the device’s primary magnetometer sensor.
...tion about the magnetic field as detected by the device’s primary magnetometer sensor.

Navigator.getBattery() - Web APIs
ides information about the system's battery.
...ts and this method was called from insecure context.

OrientationSensor.populateMatrix() - Web APIs
the populatematrix method of the orientationsensor interface populates the given target matrix with the rotation matrix based on the latest sensor reading.
... given target matrix with the rotation matrix based on the latest sensor reading.

OrientationSensor - Web APIs
the orientationsensor interface of the the sensor apis is the base class for orientation sensors.
...r interface of the the sensor apis is the base class for orientation sensors.

RelativeOrientationSensor.RelativeOrientationSensor() - Web APIs
the relativeorientationsensor constructor creates a new relativeorientationsensor object which describes the device's physical orientation.
... the relativeorientationsensor constructor creates a new relativeorientationsensor object which describes the device's physical orientation.

RelativeOrientationSensor - Web APIs
the relativeorientationsensor interface of the the sensor apis describes the device's physical orientation without regard to the earth's reference coordinate system.
...rientation without regard to the earth's reference coordinate system.

Request - Web APIs
quest.method read only contains the request's method (get, post, etc.) request.mode read only contains the mode of the request (e.g., cors, no-cors, same-origin, navigate.) request.redirect read only contains the mode for how redirects are handled.
...uest's method (get, post, etc.) request.mode read only contains the mode of the request (e.g., cors, no-cors, same-origin, navigate.) request.redirect read only contains the mode for how redirects are handled.

SVGAElement - Web APIs
ment.hreflang is a domstring that reflects the hreflang attribute, indicating the language of the linked resource.
...lects the hreflang attribute, indicating the language of the linked resource.

Sensor - Web APIs
the sensor interface of the the sensor apis is the base class for all the other sensor interfaces.
...r apis is the base class for all the other sensor interfaces.

Using the Storage Access API - Web APIs
rify whether they have access to their first-party storage and, if not, to request access.
...dded frame has storage access before attempting to read or write from storage.

WebXR permissions and security - Web APIs
the webxr device api has several areas of security to contend with, from establishing feature-policy to ensuring the user intends to use the mixed reality presentation before activating it.
... these mostly revolve around the fully-immersive immersive-vr session mode, but there are things to be aware of when setting up an ar session, as well.

Starting up and shutting down a WebXR session - Web APIs
is probably not going to go back and forth much on whether or not to use the polyfill, you can simplify this to just the specific case you need.
... with the images you present.

Background audio processing using AudioWorklet - Web APIs
is is a simple example that's better than nothing.
...ntent as a source for audio data, or is receiving data from one or more inputs.

Window.open() - Web APIs
he features that can be specified.
...; the opener property gives a secondary window a reference to its main window.

WindowOrWorkerGlobalScope.crossOriginIsolated - Web APIs
the crossoriginisolated read-only property of the windoworworkerglobalscope interface returns a boolean value that indicates whether a sharedarraybuffer can be sent via a window.postmessage() call.
... the crossoriginisolated read-only property of the windoworworkerglobalscope interface returns a boolean value that indicates whether a sharedarraybuffer can be sent via a window.postmessage() call.

Web APIs
imer_query ext_float_blend ext_frag_depth ext_srgb ext_shader_texture_lod ext_texture_compression_bptc ext_texture_compression_rgtc ext_texture_filter_anisotropic eckeygenparams eckeyimportparams ecdhkeyderiveparams ecdsaparams effecttiming element elementcssinlinestyle elementtraversal errorevent event eventlistener eventsource eventtarget extendableevent extendablemessageevent f featurepolicy federatedcredential fetchevent file fileentrysync fileerror fileexception filelist filereader filereadersync filerequest filesystem filesystemdirectoryentry filesystemdirectoryreader filesystementry filesystementrysync filesystemfileentry filesystemflags filesystemsync focusevent fontface fontfaceset fontfacesetloadevent formdata formdataentryvalue formdataevent full...
...e svgstyleelement svgswitchelement svgsymbolelement svgtrefelement svgtspanelement svgtests svgtextcontentelement svgtextelement svgtextpathelement svgtextpositioningelement svgtitleelement svgtransform svgtransformlist svgtransformable svgurireference svgunittypes svguseelement svgvkernelement svgviewelement svgzoomandpan screen screenorientation scriptprocessornode scrolltooptions securitypolicyviolationevent selection sensor sensorerrorevent serviceworker serviceworkercontainer serviceworkerglobalscope serviceworkermessageevent serviceworkerregistration serviceworkerstate shadowroot sharedworker sharedworkerglobalscope slottable sourcebuffer sourcebufferlist speechgrammar speechgrammarlist speechrecognition speechrecognitionalternative speechrecognitionerror speech...

Standard metadata names - HTML: Hypertext Markup Language
rrent page (http(s)→https).
...ese rules.

<meta>: The Document-level Metadata element - HTML: Hypertext Markup Language
r encoding.
...must be an ascii case-insensitive match for the string "utf-8".

Cross-Origin Resource Sharing (CORS) - HTTP
s a different origin (domain, protocol, or port) from its own.
... transfers between browsers and servers.

X-Frame-Options - HTTP
der can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>.
...uri this is an obsolete directive that no longer works in modern browsers.

X-XSS-Protection - HTTP
the http x-xss-protection response header is a feature of internet explorer, chrome and safari that stops pages from loading when they detect reflected cross-site scripting (xss) attacks.
...isables the use of inline javascript ('unsafe-inline'), they can still provide protections for users of older web browsers that don't yet support csp.

HTTP resources and specifications - HTTP
oposed standard fetchthe definition of 'cors' in that specification.
...he definition of 'cors' in that specification.

<use> - SVG: Scalable Vector Graphics
other attributes not set on the referenced element will be applied to the use element.
...taken when using css to style a use element and its cloned descendants.

preferences/service - Archive of obsolete content
example: require("sdk/preferences/service").set("general.useragent.locale", "chrome://global/locale/intl.properties"); example: setting global preferences var { get, set } = require("sdk/preferences/service"); var { when: unload } = require("sdk/system/unload"); var oldvalue = get("browser.urlbar.autofill"); set("browser.urlbar.autofill", true); // by amo policy global preferences must be changed back to their original value unload(function() { set("browser.urlbar.autofill", oldvalue); }); ...

Miscellaneous - Archive of obsolete content
} inserttext(document.getelementbyid("example"), "the text to be inserted"); disabling javascript programmatically // disable js in the currently active tab from the context of browser.xul gbrowser.docshell.allowjavascript = false; if this isn't your browser, you should save the value and restore it when finished.

Getting the page URL in NPAPI plugin - Archive of obsolete content
sometimes, you want to restrict an npapi plugin to be loadable only from a certain url or domain or scheme.

Images, Tables, and Mysterious Gaps - Archive of obsolete content
e-box-contain, which has been proposed for inclusion in css3.

Misc top level - Archive of obsolete content
-pixel spacer gifs, the principles (and perils) remain largely the same.

JavaScript Client API - Archive of obsolete content
rsion of the firefox sync server for multiple account testing and that any use of mozilla’s hosted firefox sync services is subject to mozilla’s firefox sync terms of service at https://services.mozilla.com/tos/.

New Security Model for Web Services - Archive of obsolete content
been designed to prevent sandboxed applications loaded behind a firewall from compromising other resources protected behind the firewall.

Elements - Archive of obsolete content
/binding%3e%0a%3c/bindings%3e%0a); } since data: urls don't support fragment identifiers, the first binding found in the embedded xml is used instead.

2006-12-01 - Archive of obsolete content
summary: mozilla.dev.l10n - december 1, 2006 announcements langpacks for sunbird nightly builds available for testing langpacks for sunbird nightly builds available for testing seamonkey 1.1 late string changes for mail content policy the fix to bug 360288 has landed.

2006-11-24 - Archive of obsolete content
te of bugs for the firefox 1.5.0.9/2.0.0.1 releases discussion non-ascii rendering performance boris zbarsky made some suggestions on how to improve international font rendering cvs commit access changes a large discussion went on about changes to policies surrounding cvs commit access project drivers and technical oversight mike connor suggested ways to better organize project management, policy making, and technical oversight.

2006-12-01 - Archive of obsolete content
an info about what happens at the meetings be found (since the agenda often seems bare).

2006-11-10 - Archive of obsolete content
discussions how to know the full height and width of a webpage discussion on how to determine the full height and width of a web page when embedding a browser into an application.

2006-12-01 - Archive of obsolete content
summary: mozilla.dev.tech.xpcom - nov 25- dec 01, 2006 announcements none during this week.

Introduction to Public-Key Cryptography - Archive of obsolete content
software can trust.

Choosing Standards Compliance Over Proprietary Practices - Archive of obsolete content
velop proprietary authoring tools for each application?

RDF in Mozilla FAQ - Archive of obsolete content
the rdf interfaces and services; see bug 122846 for details.

Archive of obsolete content
the goal of this handbook is to help you update websites to work with standards-based browsers and properly detect gecko.

Implementing controls using the Gamepad API - Game development
er types of gamepads like the ps3 controller (or a no-name, generic one), so you have to be careful and not just assume the button you're expecting will be the same button you'll actually get.

Gecko FAQ - Gecko Redirect 1
layout engine?

CORS - MDN Web Docs Glossary: Definitions of Web-related terms
cors (cross-origin resource sharing) is a system, consisting of transmitting http headers, that determines whether browsers block frontend javascript code from accessing responses for cross-origin requests.

Document directive - MDN Web Docs Glossary: Definitions of Web-related terms
csp document directives are used in a content-security-policy header and govern the properties of a document or worker environment to which a policy applies.

Fetch directive - MDN Web Docs Glossary: Definitions of Web-related terms
csp fetch directives are used in a content-security-policy header and control locations from which certain resource types may be loaded.

Forbidden header name - MDN Web Docs Glossary: Definitions of Web-related terms
th `sec-` are reserved for creating new headers safe from apis using fetch that grant developers control over headers, such as xmlhttprequest.

Reporting directive - MDN Web Docs Glossary: Definitions of Web-related terms
csp reporting directives are used in a content-security-policy header and control the reporting process of csp violations.

SRI - MDN Web Docs Glossary: Definitions of Web-related terms
subresource integrity (sri) is a security feature that enables browsers to verify that files they fetch (for example, from a cdn) are delivered without unexpected manipulation.

Site - MDN Web Docs Glossary: Definitions of Web-related terms
the site of a piece of web content is determined by the registrable domain of the host within the origin.

Origin - MDN Web Docs Glossary: Definitions of Web-related terms
schemes http://example.com http://www.example.com http://myapp.example.com different hosts http://example.com http://example.com:8080 different ports specifications specification status comment html living standardthe definition of 'origin' in that specification.

MDN Web Docs Glossary: Definitions of Web-related terms
responsive web design rest rgb ril robots.txt round trip time (rtt) routers rss rtcp (rtp control protocol) rtf rtl (right to left) rtp (real-time transport protocol) and srtp (secure rtp) rtsp: real-time streaming protocol ruby s safe same-origin policy scm scope screen reader script-supporting element scroll container scrollport sctp sdp search engine second-level domain secure sockets layer (ssl) selector (css) self-executing anonymous function semantics seo serialization server serve...

What is accessibility? - Learn web development
, and easier to maintain.

Sending forms through JavaScript - Learn web development
//example.com/cors.php' ); // add the required http header for form data post requests xhr.setrequestheader( 'content-type', 'application/x-www-form-urlencoded' ); // finally, send our data.

Handling common accessibility problems - Learn web development
od for catching such problems.

Client-side tooling overview - Learn web development
an understand.

Accessibility/LiveRegionDevGuide
.

Embedding API for Accessibility
setboolpref("browser.accept.applets", acceptapplets); no scripts setboolpref("browser.accept.scripts", acceptscripts); no popup windows // turn window.open off for particular sites: user_pref("capability.policy.popupsites.sites", "http://www.annoyingsite1.com http://www.popupsite2.com"); user_pref("capability.policy.popupsites.windowinternal.open","noaccess"); // or turn it off everywhere: user_pref("capability.policy.default.windowinternal.open","noaccess"); // o...

Links and Resources
here are some useful links for those interested in web accessibility as well as open source accessibility.

Application cache implementation overview
pplicationcache object has been found, there is no offline cache to load from and the load continues a usual way by loading from normal http cache, further steps are not executed.

Installing headers using EXPORTS
ction between xpidl_module and module is that each directory with idl files must have a unique typelib file, but several directories may export headers to the same location.

Message manager overview
from firefox 38 onwards, they also enable code running in the parent process to load process scripts into the child process.

Errors
this page lists the errors that can be raised due to firefox's anti-tracking functionality, governed by the storage access policy.

Privacy
this document lists privacy-related documentation.

Security best practices for Firefox front-end engineers
this article will help firefox developers understand the security controls in place and avoid common pitfalls when developing front-end code for firefox.

Localizing extension metadata on addons.mozilla.org
amo supports localized metadata for each extension.

PR_SetLibraryPath
ether that pathname should be absolute or relative.

JSS Provider Notes
desede des aes rc4 secretkeyspec for increased security, some secretkeys may not be extractable from their pkcs #11 token.

Mozilla-JSS JCA Provider notes
ec class desede desedekeyspec des deskeyspec desede des aes rc4 secretkeyspec for increased security, some secretkeys may not be extractable from their pkcs #11 token.

NSS_3.12.1_release_notes.html
ader file bug 429716: debug builds of libpkix unconditionally dump socket traffic to stdout bug 430368: vfychain -t option is undocumented bug 430369: vfychain -o succeeds even if -pp is not specified bug 430399: vfychain -pp crashes bug 430405: error log is not produced by cert_pkixverifycert bug 430743: update ssltap to understand the tls session ticket extension bug 430859: pkix: policy mapping fails verification with error invalid arguments bug 430875: document the policy for the order of cipher suites in ssl_implementedciphers.

NSS 3.12.4 release notes
, these characters must be escaped: \ ( | ) [ ~ except when they occur inside a bracketed expression, where only \ and ] require escaping.

NSS 3.14 release notes
tion clienthello will be set to match the client_version that was sent in the initial clienthello.

NSS 3.15.5 release notes
negotiation.

NSS 3.16.3 release notes
notable changes in nss 3.16.3 the following 1024-bit ca certificates were removed cn = entrust.net secure server certification authority sha1 fingerprint: 99:a6:9b:e6:1a:fe:88:6b:4d:2b:82:00:7c:b8:54:fc:31:7e:15:39 cn = gte cybertrust global root sha1 fingerprint: 97:81:79:50:d8:1c:96:70:cc:34:d8:09:cf:79:44:31:36:7e:f4:74 ou = valicert class 1 policy validation authority sha1 fingerprint: e5:df:74:3c:b6:01:c4:9b:98:43:dc:ab:8c:e8:6a:81:10:9f:e4:8e ou = valicert class 2 policy validation authority sha1 fingerprint: 31:7a:2a:d0:7f:2b:33:5e:f5:a1:c3:4e:4b:57:e8:b7:d8:f1:fc:a6 ou = valicert class 3 policy validation authority sha1 fingerprint: 69:bd:8c:f4:9c:d3:00:fb:59:2e:17:93:ca:55:6a:f3:ec...

NSS 3.16.4 release notes
ses/nss_3_16_4_rtm/src/ new in nss 3.16.4 this release consists primarily of ca certificate changes as listed below, and includes a small number of bug fixes.

NSS 3.18.1 release notes
s attributed to this change.

NSS 3.21 release notes
ckm_tls12_key_and_mac_derive - derives tls 1.2 traffic key and iv ckm_tls12_master_key_derive_dh - derives tls 1.2 master secret for dh (and ecdh) cipher suites ckm_tls12_key_safe_derive and ckm_tls_kdf are identifiers for additional pkcs#12 mechanisms for tls 1.2 that are currently unused in nss.

NSS 3.43 release notes
g 1529308 - improve gyp build system handling bug 1529950 and bug 1521174 - improve nss s/mime tests for thunderbird bug 1530134 - if docker isn't installed, try running a local clang-format as a fallback bug 1531267 - enable fips mode automatically if the system fips mode flag is set bug 1528262 - add a -j option to the strsclnt command to specify sigschemes bug 1513909 - add manual for nss-policy-check bug 1531074 - fix a deref after a null check in seckey_setpublicvalue bug 1517714 - properly handle esni with hrr bug 1529813 - expose hkdf-expand-label with mechanism bug 1535122 - align tls 1.3 hkdf trace levels bug 1530102 - use getentropy on compatible versions of freebsd.

NSS 3.45 release notes
ug 1540403 - implement delegated credentials (draft-ietf-tls-subcerts) this adds a new experimental function: ssl_delegatecredential note: in 3.45, selfserv does not yet support delegated credentials.

NSS 3.47 release notes
sion in test scripts bug 1234830 - [cid 1242894][cid 1242852] unused values bug 1580126 - fix build failure on aarch64_be while building freebl/gcm bug 1385039 - build nspr tests as part of nss continuous integration bug 1581391 - fix build on openbsd/arm64 after bug #1559012 bug 1581041 - mach-commands -> mach-completion bug 1558313 - code bugs found by clang scanners.

NSS 3.52 release notes
bug 1612493 - integrate avx2 chacha20, poly1305, and chacha20poly1305 from hacl*.

PKCS11 FAQ
starts using a token for a given operation (like s/mime or ssl), it works hard to keep using that same token (so keys don't get moved around).

NSS tools : vfychain
create certificate, key, and module security database files.

NSS_3.12.3_release_notes.html
.h) seedcontextstr seedcontext new functions in the nss shared library: cert_rfc1485_escapeandquote (see cert.h) cert_comparecerts (see cert.h) cert_registeralternateocspaiainfocallback (see ocsp.h) pk11_getsymkeyhandle (see pk11pqg.h) util_setforkstate (see secoid.h) nss_getalgorithmpolicy (see secoid.h) nss_setalgorithmpolicy (see secoid.h) for the 2 functions above see also (in secoidt.h): nss_use_alg_in_cert_signature nss_use_alg_in_cms_signature nss_use_alg_reserved support for the watcom c compiler is removed the file watcomfx.h is removed.

NSS tools : vfychain
with security module database management are part of a process that typically also involves managing key databases and certificate databases.

Network Security Services
pkcs #11 information documentation on pkcs #11 modules implementing pkcs #11 for nss the strings nss uses to load pkcs #11 modules pkcs #11 faq using the jar installation manager to install a pkcs #11 cryptographic module pkcs #11 conformance testing - archived version ca certificates pre-loaded into nss mozilla ca certificate policy list of pre-loaded ca certificates consumers of this list must consider the trust bit setting for each included root certificate.

Small Footprint
at include all the classes from <tt>org.mozilla.javascript.optimizer</tt> package.

Rhino overview
e space character as an argument (skips leading whitespace, and splits on whitespace).

Hacking Tips
g files from the harddisk using httprequest, even when the file loading the file is on the harddisk.

Security and the jar protocol
s users.

A Web PKI x509 certificate primer
rtificates included by default have their "trust bits" set to indicate if the ca's root certificates may be used to verify certificates for ssl servers, s/mime email users, and/or digitally-signed code objects without having to ask users for further permission or information.

Preface
ted with the step are discussed.

Using XPCOM Components
functionality that lets users load and remove cookies from the user interface.

Creating XPCOM components
e modifying paths with nsifile manipulating files with nsifile using nsilocalfile for reading data processing the white list data iweblock method by method lock and unlock addsite removesite setsites getnext getsites hasmoreelements finishing the component using frozen interfaces copying interfaces into your build environment implementing the nsicontentpolicy interface receiving notifications implementing the nsicontentpolicy uniform resource locators checking the white list creating nsiuri objects building the weblock ui user interface package list client code overview xul the xul document the locking ui site adding ui weblock.xul overlaying new user interface into mozilla weblockoverlay.xul other res...

nsIAnnotationService
ed in seeing if they come back to this page some time in the near future.

nsIApplicationCache
ey, in unsigned long typebits); void unmarkentry(in acstring key, in unsigned long typebits); attributes attribute type description active boolean true if the cache is the active cache for this group, otherwise false.

nsIDispatchSupport
in nsiidref id); void jsval2comvariant(in jsval var, out comvariant comvar); methods comvariant2jsval() converts a com variant to a jsval.

nsIRequest
ription loadflags nsloadflags the load flags of this request.

XPCOM Interface Reference by grouping
ocesscontentframemessagemanager nsiscriptableio nsixpcscriptable future nsixmlhttprequestupload obsolete nsixmlrpcclient nsixmlrpcfault security auth nsiauthmodule nsiauthprompt nsiauthpromptprovider nsiauthpromptwrapper nsiasyncverifyredirectcallback content nsicontentpolicy credentials nsilogininfo nsiloginmanager using nsiloginmanager nsiloginmanagerstorage nsiloginmetainfo history nsiglobalhistory nsiglobalhistory2 nsiglobalhistory3 ssl nsibadcertlistener2 system action nsicancelable ...

Xray vision
ion privileged code automatically gets xray vision whenever it accesses objects belonging to less-privileged code.

Mailnews and Mail code review requirements
anged.

Toolkit version format
be compatible with the firefox 1.0.x version format: 1.0+ is the same as 1.1pre the rationale behind splitting a version part into a sequence of strings and numbers is that when comparing version parts, the numeric parts are compared as numbers, e.g.

Migrating from Firebug - Firefox Developer Tools
tools, you may wonder where the features you loved in firebug are available in the developer tools.

AudioWorkletProcessor.process - Web APIs
if the automation rate is "k-rate", the array will contain a single value, which is to be used for each of 128 frames.

Document.cookie - Web APIs
to note that the path attribute does not protect against unauthorized reading of the cookie from a different path.

Document.open() - Web APIs
an automatic document.open() call happens when document.write() is called after the page has loaded.

Fetch API - Web APIs
and it will only reject on network failure or if anything prevented the request from completing.

HTMLAudioElement - Web APIs
number of bytes actually written to the stream.

HTMLElement - Web APIs
returns a object representing the item value.

HTMLIFrameElement.src - Web APIs
the htmliframeelement.src property reflects the html referrerpolicy attribute of the <iframe> element defining which referrer is sent when fetching the resource.

HTMLOrForeignElement.nonce - Web APIs
the nonce property of the htmlorforeignelement interface returns the cryptographic number used once that is used by content security policy to determine whether a given fetch will be allowed to proceed.

HTMLOrForeignElement - Web APIs
face; you can't actually create an object of type htmlorforeignelement.

Using IndexedDB - Web APIs
iframe.load(function() { $(this).contents().find('body').html("no view available"); }); } }); } /** * @param {string} biblioid * @param {string} title * @param {number} year * @param {string} url the url of the image to download and store in the local * indexeddb database.

IndexedDB API - Web APIs
n a series of transactions.

InterventionReportBody - Web APIs
rting api represents the body of an intervention report (the return value of its report.body property).

Location: reload() - Web APIs
the location.reload() method reloads the current url, like the refresh button.

MediaStreamConstraints.audio - Web APIs
rmission is not given to use the audio source, the call to getusermedia() will fail.

RTCDtlsTransport.state - Web APIs
ipt of an error alert or failure to validate the remote fingerprint).

RTCRtpReceiver.transport - Web APIs
ets with the remote peer, or null if the receiver isn't yet connected to a transport.

RTCRtpSender.transport - Web APIs
e packets with the remote peer, or null if the sender isn't yet connected to a transport.

Report.body - Web APIs
f the report interface returns the body of the report, which is a reportbody object containing the detailed report information.

Using the Resource Timing API - Web APIs
tatic/img/opengraph-logo.png"; var image2 = new image(); image2.src = "http://mozorg.cdn.mozilla.net/media/img/firefox/firefox-256.e2c1fc556816.jpg" // set a callback if the resource buffer becomes filled performance.onresourcetimingbufferfull = buffer_full; } coping with cors when cors is in effect, many of the timing properties' values are returned as zero unless the server's access policy permits these values to be shared.

Resource Timing API - Web APIs
he browser receives the first byte of the response from the server; and responseend - the timestamp after the browser receives the last byte of the resource.

Storage API - Web APIs
ty and/or usage levels of individual sites to determine what their quotas should be.

WakeLock.request() - Web APIs
t(type); parameters type options are as follows: 'screen': requests a screen wake lock.

WebXR Device API - Web APIs
ith multiple buttons and/or axes) and gamepad-like devices.

Advanced techniques: Creating and sequencing audio - Web APIs
isplaying = false; setupsample() .then((sample) => { loadingel.style.display = 'none'; // remove loading screen dtmf = sample; // to be used in our playsample function playbutton.addeventlistener('click', function() { isplaying = !isplaying; if (isplaying) { // start playing // check if context is in suspended state (autoplay policy) if (audioctx.state === 'suspended') { audioctx.resume(); } currentnote = 0; nextnotetime = audioctx.currenttime; scheduler(); // kick off scheduling requestanimationframe(draw); // start the drawing loop.

Using the Web Audio API - Web APIs
text.destination); a good way to visualise these nodes is by drawing an audio graph so you can visualize it.

Window.localStorage - Web APIs
https (e.g., https://example.com).

Window.resizeBy() - Web APIs
ault.

Window.sessionStorage - Web APIs
s (e.g., https://example.com).

XMLHttpRequest.mozSystem - Web APIs
mozsystem is a boolean.

XMLHttpRequest.withCredentials - Web APIs
no effect on same-site requests.

XMLHttpRequest - Web APIs
ing credentials such as cookies or authorization headers.

XRSessionInit - Web APIs
t the local reference space, any request to open an immersive xrsession is required to obtain explicit or implicit user consent.

XRSystem: devicechange event - Web APIs
o added properties.

XRSystem: isSessionSupported() - Web APIs
resolves to true if the specified session mode is supported; otherwise the promise resolves to false.

ARIA Screen Reader Implementors Guide - Accessibility
y="true" should not be added to the queue until that attribute is cleared.

Mozilla CSS extensions - CSS: Cascading Style Sheets
ccepted] -moz-animation-name [prefixed version still accepted] -moz-animation-play-state [prefixed version still accepted] -moz-animation-timing-function [prefixed version still accepted] -moz-appearance b -moz-backface-visibility [prefixed version still accepted] -moz-background-clipobsolete since gecko 2 -moz-background-originobsolete since gecko 2 -moz-background-inline-policyobsolete since gecko 32 [superseded by the standard version box-decoration-break] -moz-background-sizeobsolete since gecko 2 -moz-border-end [superseded by the standard version border-inline-end] -moz-border-end-color [superseded by the standard version border-inline-end-color] -moz-border-end-style [superseded by the standard version border-inline-end-style] -moz-border-end-width [su...

WAI ARIA Live Regions/API Support - Developer guides
cs from an event for any mutation event in a page, the author can get the following object attributes from the event object, if they are defined on some ancestor element (closest ancestor wins): object attribute name possible values default value if not specified meaning aria markup if required container-live "off" | "polite" | "assertive" "off" interruption policy aria-live on ancestor element container-relevant "[additions] [removals] [text]" | "all" "additions text" what types of mutations are possibly relevant?

Preloading content with rel="preload" - HTML: Hypertext Markup Language
ages.

Proxy Auto-Configuration (PAC) file - HTTP
d to a web proxy server.

HTTP
that can be done with http: get, post, and also less common requests like options, delete, or trace.

Error: Permission denied to access property "x" - JavaScript
permission denied to access property" occurs when there was an attempt to access an object for which you have no permission.

SVG Attribute reference - SVG: Scalable Vector Graphics
ethod min mode n name numoctaves o offset opacity operator order orient orientation origin overflow overline-position overline-thickness p panose-1 paint-order path pathlength patterncontentunits patterntransform patternunits ping pointer-events points pointsatx pointsaty pointsatz preservealpha preserveaspectratio primitiveunits r r radius referrerpolicy refx refy rel rendering-intent repeatcount repeatdur requiredextensions requiredfeatures restart result rotate rx ry s scale seed shape-rendering slope spacing specularconstant specularexponent speed spreadmethod startoffset stddeviation stemh stemv stitchtiles stop-color stop-opacity strikethrough-position strikethrough-thickness string stroke stroke-dasharr...

<a> - SVG: Scalable Vector Graphics
default value: none; animatable: yes ping a space-separated list of urls to which, when the hyperlink is followed, post requests with the body ping will be sent by the browser (in the background).

Mixed content - Web security
, as they are in chrome.

Securing your site - Web security
http header lets a website specify that it may only be accessed using https.

Types of attacks - Web security
rks are a typically means of executing this attack.