1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/dom/locales/en-US/chrome/security/security.properties Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,22 @@ 1.4 +# Mixed Content Blocker 1.5 +# LOCALIZATION NOTE: "%1$S" is the URI of the blocked mixed content resource 1.6 +BlockMixedDisplayContent = Blocked loading mixed display content "%1$S" 1.7 +BlockMixedActiveContent = Blocked loading mixed active content "%1$S" 1.8 + 1.9 +# CSP 1.10 +ReportOnlyCSPIgnored=Report-only CSP policy will be ignored because there are other non-report-only CSP policies applied. 1.11 +# LOCALIZATION NOTE: Do not translate "X-Content-Security-Policy", "X-Content-Security-Policy-Report-Only", "Content-Security-Policy" or "Content-Security-Policy-Report-Only" 1.12 +OldCSPHeaderDeprecated=The X-Content-Security-Policy and X-Content-Security-Report-Only headers will be deprecated in the future. Please use the Content-Security-Policy and Content-Security-Report-Only headers with CSP spec compliant syntax instead. 1.13 +# LOCALIZATION NOTE: Do not translate "X-Content-Security-Policy/Report-Only" or "Content-Security-Policy/Report-Only" 1.14 +BothCSPHeadersPresent=This site specified both an X-Content-Security-Policy/Report-Only header and a Content-Security-Policy/Report-Only header. The X-Content-Security-Policy/Report-Only header(s) will be ignored. 1.15 + 1.16 +# CORS 1.17 +CrossSiteRequestBlocked=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. This can be fixed by moving the resource to the same domain or enabling CORS. 1.18 + 1.19 +# LOCALIZATION NOTE: Do not translate "Strict-Transport-Security" or "HSTS" 1.20 +InvalidSTSHeaders=The site specified an invalid Strict-Transport-Security header. 1.21 +InsecurePasswordsPresentOnPage=Password fields present on an insecure (http://) page. This is a security risk that allows user login credentials to be stolen. 1.22 +InsecureFormActionPasswordsPresent=Password fields present in a form with an insecure (http://) form action. This is a security risk that allows user login credentials to be stolen. 1.23 +InsecurePasswordsPresentOnIframe=Password fields present on an insecure (http://) iframe. This is a security risk that allows user login credentials to be stolen. 1.24 +LoadingMixedActiveContent=Loading mixed (insecure) active content on a secure page "%1$S" 1.25 +LoadingMixedDisplayContent=Loading mixed (insecure) display content on a secure page "%1$S"