csp.properties (18423B)
1 # This Source Code Form is subject to the terms of the Mozilla Public 2 # License, v. 2.0. If a copy of the MPL was not distributed with this 3 # file, You can obtain one at http://mozilla.org/MPL/2.0/. 4 5 # CSP Warnings: 6 7 # LOCALIZATION NOTE (CSPInlineStyleViolation): 8 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 9 # %2$S is the type of directive used by the resource (e.g. style-src-elem) 10 # %3$S is a SHA256 hash string. 11 # Don't translate anything inside '' 12 CSPInlineStyleViolation2 = The page’s settings blocked an inline style (%2$S) from being applied because it violates the following directive: “%1$S”. Consider using a hash ('sha256-%3$S', requires 'unsafe-hashes' for style attributes) or a nonce. 13 # LOCALIZATION NOTE (CSPROInlineStyleViolation): 14 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 15 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 16 # %2$S is the type of directive used by the resource (e.g. style-src-elem) 17 # %3$S is a SHA256 hash string. 18 # Don't translate anything inside '' 19 CSPROInlineStyleViolation2 = (Report-Only policy) The page’s settings would block an inline style (%2$S) from being applied because it violates the following directive: “%1$S”. Consider using a hash ('sha256-%3$S', requires 'unsafe-hashes' for style attributes) or a nonce. 20 # LOCALIZATION NOTE (CSPInlineScriptViolation): 21 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 22 # %2$S is the type of directive used by the resource (e.g. script-src-elem) 23 # %3$S is a SHA256 hash string. 24 # Don't translate anything inside '' 25 CSPInlineScriptViolation2 = The page’s settings blocked an inline script (%2$S) from being executed because it violates the following directive: “%1$S”. Consider using a hash ('sha256-%3$S') or a nonce. 26 # LOCALIZATION NOTE (CSPROInlineScriptViolation): 27 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 28 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 29 # %2$S is the type of directive used by the resource (e.g. script-src-elem) 30 # %3$S is a SHA256 hash string. 31 # Don't translate anything inside '' 32 CSPROInlineScriptViolation2 = (Report-Only policy) The page’s settings would block an inline script (%2$S) from being executed because it violates the following directive: “%1$S”. Consider using a hash ('sha256-%3$S') or a nonce. 33 # LOCALIZATION NOTE (CSPEventHandlerScriptViolation): 34 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 35 # %2$S is the type of directive used by the resource (e.g. script-src-attr) 36 # %3$S is a SHA256 hash string. 37 # Don't translate anything inside '' 38 CSPEventHandlerScriptViolation2 = The page’s settings blocked an event handler (%2$S) from being executed because it violates the following directive: “%1$S”. Consider using a hash ('sha256-%3$S') together with 'unsafe-hashes'. 39 # LOCALIZATION NOTE (CSPROEventHandlerScriptViolation): 40 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 41 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 42 # %2$S is the type of directive used by the resource (e.g. script-src-attr) 43 # %3$S is a SHA256 hash string. 44 # Don't translate anything inside '' 45 CSPROEventHandlerScriptViolation2 = (Report-Only policy) The page’s settings would block an event handler (%2$S) from being executed because it violates the following directive: “%1$S”. Consider using a hash ('sha256-%3$S') together with 'unsafe-hashes'. 46 # LOCALIZATION NOTE (CSPEvalScriptViolation): 47 # Don't translate/change "'unsafe-eval'", including the single quote. 48 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 49 # %2$S is the type of directive used by the resource (e.g. script-src) 50 CSPEvalScriptViolation = The page’s settings blocked a JavaScript eval (%2$S) from being executed because it violates the following directive: “%1$S” (Missing 'unsafe-eval') 51 # LOCALIZATION NOTE (CSPROEvalScriptViolation): 52 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 53 # Don't translate/change "'unsafe-eval'", including the single quote. 54 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 55 # %2$S is the type of directive used by the resource (e.g. script-src) 56 CSPROEvalScriptViolation = (Report-Only policy) The page’s settings would block a JavaScript eval (%2$S) from being executed because it violates the following directive: “%1$S” (Missing 'unsafe-eval') 57 # LOCALIZATION NOTE (CSPWasmEvalScriptViolation): 58 # WebAssembly is a feature name. 59 # Don't translate/change "'wasm-unsafe-eval'" or "'unsafe-eval'", including the single quote. 60 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 61 # %2$S is the type of directive used by the resource (e.g. script-src) 62 CSPWasmEvalScriptViolation = The page’s settings blocked WebAssembly (%2$S) from being executed because it violates the following directive: “%1$S” (Missing 'wasm-unsafe-eval' or 'unsafe-eval') 63 # LOCALIZATION NOTE (CSPROWasmEvalScriptViolation): 64 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 65 # WebAssembly is a feature name. 66 # Don't translate/change "'wasm-unsafe-eval'" or "'unsafe-eval'", including the single quote. 67 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 68 # %2$S is the type of directive used by the resource (e.g. script-src) 69 CSPROWasmEvalScriptViolation = (Report-Only policy) The page’s settings would block WebAssembly (%2$S) from being executed because it violates the following directive: “%1$S” (Missing 'wasm-unsafe-eval' or 'unsafe-eval') 70 # LOCALIZATION NOTE (CSPTrustedTypesPolicyViolation): 71 # Don't translate "Trusted Types" because it's a feature name. 72 # %1$S is the entire directive (name and value) that has been violated (e.g. "trusted types X"). 73 CSPTrustedTypesPolicyViolation = The page’s settings blocked creating a Trusted Types policy because it violates the following directive: “%1$S“ 74 # LOCALIZATION_NOTE (CSPROTrustedTypesPolicyViolation): 75 # Don't translate "Trusted Types" because it's a feature name. 76 # %1$S is the entire directive (name and value) that has been violated (e.g. "trusted types X"). 77 CSPROTrustedTypesPolicyViolation = (Report-Only policy) The page’s settings would block creating a Trusted Types policy because it violates the following directive: “%1$S“ 78 # LOCALIZATION NOTE (CSPTrustedTypesSinkViolation): 79 # Don't translate "require-trusted-types-for 'script'", because it's the CSP directive. 80 CSPTrustedTypesSinkViolation = The page’s settings blocked assigning to an injection sink because it violates the following directive: “require-trusted-types-for ’script’“ 81 # LOCALIZATION NOTE (CSPROTrustedTypesSinkViolation): 82 # Don't translate "require-trusted-types-for 'script'", because it's the CSP directive. 83 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 84 CSPROTrustedTypesSinkViolation = (Report-Only policy) The page’s settings would block assigning to an injection sink because it violates the following directive: “require-trusted-types-for ’script’“ 85 # LOCALIZATION NOTE (CSPStyleViolation): 86 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 87 # %2$S is the URI of the resource which violated the directive. 88 # %3$S is the type of directive used by the resource (e.g. style-src) 89 CSPStyleViolation = The page’s settings blocked a style (%3$S) at %2$S from being applied because it violates the following directive: “%1$S” 90 # LOCALIZATION NOTE (CSPROStyleViolation): 91 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 92 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 93 # %2$S is the URI of the resource which violated the directive. 94 # %3$S is the type of directive used by the resource (e.g. style-src) 95 CSPROStyleViolation = (Report-Only policy) The page’s settings would block a style (%3$S) at %2$S from being applied because it violates the following directive: “%1$S” 96 # LOCALIZATION NOTE (CSPScriptViolation): 97 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 98 # %2$S is the URI of the resource which violated the directive. 99 # %3$S is the type of directive used by the resource (e.g. script-src-elem) 100 CSPScriptViolation = The page’s settings blocked a script (%3$S) at %2$S from being executed because it violates the following directive: “%1$S” 101 # LOCALIZATION NOTE (CSPROScriptViolation): 102 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 103 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 104 # %2$S is the URI of the resource which violated the directive. 105 # %3$S is the type of directive used by the resource (e.g. script-src-elem) 106 CSPROScriptViolation = (Report-Only policy) The page’s settings would block a script (%3$S) at %2$S from being executed because it violates the following directive: “%1$S” 107 # LOCALIZATION NOTE (CSPWorkerViolation): 108 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 109 # %2$S is the URI of the resource which violated the directive. 110 # %3$S is the type of directive used by the resource (e.g. worker-src) 111 CSPWorkerViolation = The page’s settings blocked a worker script (%3$S) at %2$S from being executed because it violates the following directive: “%1$S” 112 # LOCALIZATION NOTE (CSPROWorkerViolation): 113 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 114 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 115 # %2$S is the URI of the resource which violated the directive. 116 # %3$S is the type of directive used by the resource (e.g. worker-src) 117 CSPROWorkerViolation = (Report-Only policy) The page’s settings would block a worker script (%3$S) at %2$S from being executed because it violates the following directive: “%1$S” 118 # LOCALIZATION NOTE (CSPGenericViolation): 119 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 120 # %2$S is the URI of the resource which violated the directive. 121 # %3$S is the type of directive used by the resource (e.g. image-src) 122 CSPGenericViolation = The page’s settings blocked the loading of a resource (%3$S) at %2$S because it violates the following directive: “%1$S” 123 # LOCALIZATION NOTE (CSPROGenericViolation): 124 # Don't translate "Report-Only" as it's part of the name Content-Security-Policy-Report-Only. 125 # %1$S is the entire directive that has been violated. (e.g. "default-src 'none'") 126 # %2$S is the URI of the resource which violated the directive. 127 # %3$S is the type of directive used by the resource (e.g. image-src) 128 CSPROGenericViolation = (Report-Only policy) The page’s settings would block the loading of a resource (%3$S) at %2$S because it violates the following directive: “%1$S” 129 130 # LOCALIZATION NOTE (triedToSendReport): 131 # %1$S is the URI we attempted to send a report to. 132 triedToSendReport = Tried to send report to invalid URI: “%1$S” 133 tooManyReports = Prevented too many CSP reports from being sent within a short period of time. 134 # LOCALIZATION NOTE (couldNotParseReportURI): 135 # %1$S is the report URI that could not be parsed 136 couldNotParseReportURI = couldn’t parse report URI: %1$S 137 # LOCALIZATION NOTE (couldNotProcessUnknownDirective): 138 # %1$S is the unknown directive 139 couldNotProcessUnknownDirective = Couldn’t process unknown directive ‘%1$S’ 140 # LOCALIZATION NOTE (ignoringUnknownOption): 141 # %1$S is the option that could not be understood 142 ignoringUnknownOption = Ignoring unknown option %1$S 143 # LOCALIZATION NOTE (ignoringDuplicateSrc): 144 # %1$S defines the duplicate src 145 ignoringDuplicateSrc = Ignoring duplicate source %1$S 146 # LOCALIZATION NOTE (ignoringInvalidToken): 147 # %1$S defines the name of the directive 148 # %2$S is the token string containing non-ASCII characters. 149 ignoringInvalidToken = Ignoring directive ‘%1$S’ because the token contains invalid characters ‘%2$S’ 150 # LOCALIZATION NOTE (ignoringSrcFromMetaCSP): 151 # %1$S defines the ignored src 152 ignoringSrcFromMetaCSP = Ignoring source ‘%1$S’ (Not supported when delivered via meta element). 153 # LOCALIZATION NOTE (ignoringSrcWithinNonceOrHashDirective): 154 # %1$S is the ignored src (e.g. "unsafe-inline") 155 # %2$S is the directive (e.g. "script-src-elem") 156 ignoringSrcWithinNonceOrHashDirective = Ignoring “%1$S” within %2$S: nonce-source or hash-source specified 157 # LOCALIZATION NOTE (ignoringScriptSrcForStrictDynamic): 158 # %1$S is the ignored src 159 # %1$S is the directive src (e.g. "script-src-elem") 160 # 'strict-dynamic' should not be localized 161 ignoringScriptSrcForStrictDynamic = Ignoring “%1$S” within %2$S: ‘strict-dynamic’ specified 162 # LOCALIZATION NOTE (ignoringStrictDynamic): 163 # %1$S is the ignored src 164 ignoringStrictDynamic = Ignoring source “%1$S” (Only supported within script-src). 165 # LOCALIZATION NOTE (ignoringUnsafeEval): 166 # %1$S is the csp directive (e.g. script-src-elem) 167 # 'unsafe-eval' and 'wasm-unsafe-eval' should not be localized 168 ignoringUnsafeEval = Ignoring ‘unsafe-eval’ or ‘wasm-unsafe-eval’ inside “%1$S”. 169 # LOCALIZATION NOTE (strictDynamicButNoHashOrNonce): 170 # %1$S is the csp directive that contains 'strict-dynamic' 171 # 'strict-dynamic' should not be localized 172 strictDynamicButNoHashOrNonce = Keyword ‘strict-dynamic’ within “%1$S” with no valid nonce or hash might block all scripts from loading 173 # LOCALIZATION NOTE (reportURInotHttpsOrHttp2): 174 # %1$S is the ETLD of the report URI that is not HTTP or HTTPS 175 reportURInotHttpsOrHttp2 = The report URI (%1$S) should be an HTTP or HTTPS URI. 176 # LOCALIZATION NOTE (reportURINorReportToNotInReportOnlyHeader): 177 # %1$S is the ETLD of the page with the policy 178 reportURINorReportToNotInReportOnlyHeader = This site (%1$S) has a Report-Only policy without a report-uri directive nor a report-to directive. CSP will not block and cannot report violations of this policy. 179 # LOCALIZATION NOTE (failedToParseUnrecognizedSource): 180 # %1$S is the CSP Source that could not be parsed 181 failedToParseUnrecognizedSource = Failed to parse unrecognized source %1$S 182 # LOCALIZATION NOTE (upgradeInsecureRequest): 183 # %1$S is the URL of the upgraded request; %2$S is the upgraded scheme. 184 upgradeInsecureRequest = Upgrading insecure request ‘%1$S’ to use ‘%2$S’ 185 # LOCALIZATION NOTE (ignoreSrcForDirective): 186 ignoreSrcForDirective = Ignoring srcs for directive ‘%1$S’ 187 # LOCALIZATION NOTE (hostNameMightBeKeyword): 188 # %1$S is the hostname in question and %2$S is the keyword 189 hostNameMightBeKeyword = Interpreting %1$S as a hostname, not a keyword. If you intended this to be a keyword, use ‘%2$S’ (wrapped in single quotes). 190 # LOCALIZATION NOTE (notSupportingDirective): 191 # directive is not supported (e.g. 'reflected-xss') 192 notSupportingDirective = Not supporting directive ‘%1$S’. Directive and values will be ignored. 193 # LOCALIZATION NOTE (blockAllMixedContent): 194 # %1$S is the URL of the blocked resource load. 195 blockAllMixedContent = Blocking insecure request ‘%1$S’. 196 # LOCALIZATION NOTE (ignoringDirectiveWithNoValues): 197 # %1$S is the name of a CSP directive that requires additional values 198 ignoringDirectiveWithNoValues = Ignoring ‘%1$S’ since it does not contain any parameters. 199 # LOCALIZATION NOTE (ignoringInvalidGroupSyntax): 200 # %1$S is the whole group name being parsed 201 # %2$S is the bad character (e.g. a / slash, $ dollar etc.) 202 ignoringInvalidGroupSyntax = Ignoring report-to directive group ‘%1$S’ with invalid token ‘%2$S’. 203 # LOCALIZATION NOTE (ignoringReportOnlyDirective): 204 # %1$S is the directive that is ignored in report-only mode. 205 ignoringReportOnlyDirective = Ignoring sandbox directive when delivered in a report-only policy ‘%1$S’ 206 # LOCALIZATION NOTE (IgnoringSrcBecauseOfDirective): 207 # %1$S is the name of the src that is ignored. 208 # %2$S is the name of the directive that causes the src to be ignored. 209 IgnoringSrcBecauseOfDirective=Ignoring ‘%1$S’ because of ‘%2$S’ directive. 210 # LOCALIZATION NOTE (IgnoringSourceWithinDirective): 211 # %1$S is the ignored src 212 # %2$S is the directive which supports src 213 IgnoringSourceWithinDirective = Ignoring source “%1$S” (Not supported within ‘%2$S’). 214 # LOCALIZATION NOTE (IgnoringSourceWithinDirective): 215 # %1$S is the ignored src 216 obsoleteBlockAllMixedContent = Ignoring ‘%1$S’ because mixed content display upgrading makes block-all-mixed-content obsolete. 217 218 219 # CSP Errors: 220 # LOCALIZATION NOTE (couldntParseInvalidSource): 221 # %1$S is the source that could not be parsed 222 couldntParseInvalidSource = Couldn’t parse invalid source %1$S 223 # LOCALIZATION NOTE (couldntParseInvalidHost): 224 # %1$S is the host that's invalid 225 couldntParseInvalidHost = Couldn’t parse invalid host %1$S 226 # LOCALIZATION NOTE (couldntParsePort): 227 # %1$S is the string source 228 couldntParsePort = Couldn’t parse port in %1$S 229 # LOCALIZATION NOTE (duplicateDirective): 230 # %1$S is the name of the duplicate directive 231 duplicateDirective = Duplicate %1$S directives detected. All but the first instance will be ignored. 232 # LOCALIZATION NOTE (couldntParseInvalidSandboxFlag): 233 # %1$S is the option that could not be understood 234 couldntParseInvalidSandboxFlag = Couldn’t parse invalid sandbox flag ‘%1$S’ 235 # LOCALIZATION NOTE (invalidNumberOfTrustedTypesForDirectiveValues): 236 # %1$S is the number of passed tokens. 237 invalidNumberOfTrustedTypesForDirectiveValues = Received an invalid number of tokens for the ‘require-trusted-types-for‘ directive: %1$S; expected 1 238 # LOCALIZATION NOTE (invalidRequireTrustedTypesForDirectiveValue): 239 # %1$S is the passed token 240 invalidRequireTrustedTypesForDirectiveValue = Received an invalid token for the ‘require-trusted-types-for‘ directive: %1$S; expected ‘script‘ 241 # LOCALIZATION NOTE (invalidTrustedTypesExpression): 242 # %1$S is the passed token 243 invalidTrustedTypesExpression = Received an invalid token for the ‘trusted-types‘ directive: %1$S 244 245 # LOCALIZATION NOTE (CSPMessagePrefix): 246 # Do not translate "Content-Security-Policy", only handle spacing for the colon. 247 # %S is a console message that is being prefixed here. 248 CSPMessagePrefix = Content-Security-Policy: %S