Preview URLs

• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/206
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/500
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/100
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/201
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/406
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/502
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/501
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/401
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/304
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/204
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/425
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/407
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Status/412
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Methods/DELETE
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Accept-Language
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Via
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Age
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Public-Key-Pins-Report-Only
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Want-Digest
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/ETag
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/TE
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/If-Unmodified-Since
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Vary
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Date
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Warning
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Alt-Svc
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Access-Control-Request-Method
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Pragma
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/DNT
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Large-Allocation
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Connection
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Accept-CH-Lifetime
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Accept-CH
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/navigate-to
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src-attr
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/manifest-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src-attr
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src-elem
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/media-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/object-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-to
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-uri
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/plugin-types
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/child-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/worker-src
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Save-Data
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Last-Modified
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/If-Modified-Since
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/magnetometer
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/legacy-image-formats
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/gyroscope
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/publickey-credentials-get
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/unoptimized-images
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/ambient-light-sensor
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/web-share
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/unsized-media
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/vibrate
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/oversized-images
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/accelerometer
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/picture-in-picture
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/layout-animations
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/usb
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/sync-xhr
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Feature-Policy/screen-wake-lock
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Location
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Retry-After
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Range
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Referrer-Policy
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Accept-Ranges
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Public-Key-Pins
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Digest
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/If-Match
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Upgrade
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/If-Range
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/From
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Set-Cookie2
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Transfer-Encoding
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Expires
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Trailer
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Content-Location
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/CSP
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/Web_Components/HTML_Imports
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/Events/Detecting_device_orientation
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/EXSLT/math/min
• https://pr5351.content.dev.mdn.mozit.cloud/en-US/docs/Web/Security/Subresource_Integrity

Flaws

Note! 87 documents with no flaws that don't need to be listed. 🎉

URL: /en-US/docs/Web/HTTP/Headers/Public-Key-Pins-Report-Only
Title: Public-Key-Pins-Report-Only
on GitHub
Flaw count: 1

• macros:
  • /en-US/docs/Glossary/SPKI does not exist

URL: /en-US/docs/Web/HTTP/Headers/Large-Allocation
Title: Large-Allocation
on GitHub
Flaw count: 1

• broken_links:
  • Can't resolve /en-US/docs/Mozilla/Add-ons/SDK

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy
Title: Content-Security-Policy
on GitHub
Flaw count: 2

• macros:
  • /en-US/docs/Glossary/XSS redirects to /en-US/docs/Glossary/Cross-site_scripting
  • /en-US/docs/Web/API/Window/execScript does not exist

URL: /en-US/docs/Web/HTTP/Headers/Public-Key-Pins
Title: Public-Key-Pins
on GitHub
Flaw count: 1

• macros:
  • /en-US/docs/Glossary/SPKI does not exist

URL: /en-US/docs/Web/HTTP/CSP
Title: Content Security Policy (CSP)
on GitHub
Flaw count: 1

• macros:
  • /en-US/docs/Glossary/XSS redirects to /en-US/docs/Glossary/Cross-site_scripting

URL: /en-US/docs/Web/Web_Components/HTML_Imports
Title: HTML Imports
on GitHub
Flaw count: 1

• bad_bcd_queries:
  • No BCD data for query: html.elements.link.rel.import

URL: /en-US/docs/Web/Events/Detecting_device_orientation
Title: Detecting device orientation
on GitHub
Flaw count: 1

• broken_links:
  • Can't resolve /en-US/docs/Web/Events/MozOrientation

URL: /en-US/docs/Web/EXSLT/math/min
Title: math:min()
on GitHub
Flaw count: 1

• broken_links:
  • Can't resolve /en-US/XSLT/sort

External URLs

URL: /en-US/docs/Web/HTTP/Status/206
Title: 206 Partial Content
on GitHub

• https://tools.ietf.org/html/rfc7233 (1 time)

URL: /en-US/docs/Web/HTTP/Status/500
Title: 500 Internal Server Error
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)
• https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html (1 time)

URL: /en-US/docs/Web/HTTP/Status/100
Title: 100 Continue
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Status/201
Title: 201 Created
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Status/406
Title: 406 Not Acceptable
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Status/502
Title: 502 Bad Gateway
on GitHub

• https://en.wikipedia.org/wiki/Gateway_(telecommunications) (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)
• https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html (1 time)

URL: /en-US/docs/Web/HTTP/Status/501
Title: 501 Not Implemented
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Status/401
Title: 401 Unauthorized
on GitHub

• https://tools.ietf.org/html/rfc7235 (1 time)

URL: /en-US/docs/Web/HTTP/Status/304
Title: 304 Not Modified
on GitHub

• https://tools.ietf.org/html/rfc7232 (1 time)

URL: /en-US/docs/Web/HTTP/Status/204
Title: 204 No Content
on GitHub

• Parsing content after a 204 response httpwg/http-core#26 (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Status/425
Title: 425 Too Early
on GitHub

• https://tools.ietf.org/html/rfc8470 (1 time)

URL: /en-US/docs/Web/HTTP/Status/407
Title: 407 Proxy Authentication Required
on GitHub

• https://tools.ietf.org/html/rfc7235 (1 time)

URL: /en-US/docs/Web/HTTP/Status/412
Title: 412 Precondition Failed
on GitHub

• https://tools.ietf.org/html/rfc7232 (1 time)

URL: /en-US/docs/Web/HTTP/Methods/DELETE
Title: DELETE
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Accept-Language
Title: Accept-Language
on GitHub

• https://datatracker.ietf.org/doc/html/bcp47 (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Via
Title: Via
on GitHub

• https://github.com/heroku/vegur (1 time)
• https://tools.ietf.org/html/rfc7230 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Age
Title: Age
on GitHub

• https://tools.ietf.org/html/rfc7234 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Public-Key-Pins-Report-Only
Title: Public-Key-Pins-Report-Only
on GitHub

• https://tools.ietf.org/html/rfc7469 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Want-Digest
Title: Want-Digest
on GitHub

• https://datatracker.ietf.org/doc/draft-ietf-httpbis-digest-headers (1 time)
• https://datatracker.ietf.org/doc/html/rfc3230 (2 times)
• https://datatracker.ietf.org/doc/html/rfc5843 (1 time)
• https://www.rfc-editor.org/info/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/ETag
Title: ETag
on GitHub

• https://tools.ietf.org/html/rfc7232 (1 time)
• https://www.w3.org/1999/04/Editing/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/TE
Title: TE
on GitHub

• https://datatracker.ietf.org/doc/html/rfc7540 (1 time)
• https://en.wikipedia.org/wiki/Chunked_transfer_encoding (1 time)
• https://en.wikipedia.org/wiki/LZ77_and_LZ78 (1 time)
• https://en.wikipedia.org/wiki/LZW (1 time)
• https://en.wikipedia.org/wiki/Zlib (1 time)
• https://tools.ietf.org/html/rfc7230 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/If-Unmodified-Since
Title: If-Unmodified-Since
on GitHub

• https://en.wikipedia.org/wiki/Optimistic_concurrency_control (1 time)
• https://tools.ietf.org/html/rfc7232 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Vary
Title: Vary
on GitHub

• https://blogs.msdn.microsoft.com/ieinternals/2009/06/17/vary-with-care/ (1 time)
• https://en.wikipedia.org/wiki/Cloaking (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)
• https://www.fastly.com/blog/best-practices-for-using-the-vary-header (1 time)
• https://www.smashingmagazine.com/2017/11/understanding-vary-header/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Date
Title: Date
on GitHub

• https://fetch.spec.whatwg.org/ (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Warning
Title: Warning
on GitHub

• Warning httpwg/http-core#139 (1 time)
• Warning: header & stale-while-revalidate whatwg/fetch#913 (1 time)
• https://tools.ietf.org/html/rfc7234 (1 time)
• https://www.iana.org/assignments/http-warn-codes/http-warn-codes.xhtml (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Alt-Svc
Title: Alt-Svc
on GitHub

• https://tools.ietf.org/html/rfc7838 (1 time)
• https://www.mnot.net/blog/2016/03/09/alt-svc (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Access-Control-Request-Method
Title: Access-Control-Request-Method
on GitHub

• https://fetch.spec.whatwg.org/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Pragma
Title: Pragma
on GitHub

• https://tools.ietf.org/html/rfc7234 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/DNT
Title: DNT
on GitHub

• https://donottrack.us/ (1 time)
• https://en.wikipedia.org/wiki/Do_Not_Track (1 time)
• https://support.google.com/chrome/answer/2790761 (1 time)
• https://www.eff.org/deeplinks/2011/02/what-does-track-do-not-track-mean (1 time)
• https://www.mozilla.org/en-US/firefox/dnt/ (1 time)
• https://www.w3.org/TR/tracking-dnt/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Large-Allocation
Title: Large-Allocation
on GitHub

• https://gist.github.com/mystor/5739e222e398efc6c29108be55eb6fe3 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Connection
Title: Connection
on GitHub

• https://datatracker.ietf.org/doc/html/rfc7540 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
Title: Access-Control-Allow-Headers
on GitHub

• https://fetch.spec.whatwg.org/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Accept-CH-Lifetime
Title: Accept-CH-Lifetime
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Accept-CH
Title: Accept-CH
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy
Title: Content-Security-Policy
on GitHub

• https://csp.withgoogle.com/docs/strict-csp.html (1 time)
• https://github.com/google/csp-evaluator (1 time)
• https://infosec.mozilla.org/guidelines/web_security (1 time)
• https://w3c.github.io/webappsec-csp/ (1 time)
• https://w3c.github.io/webappsec-mixed-content/ (1 time)
• https://w3c.github.io/webappsec-subresource-integrity/ (1 time)
• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (2 times)
• https://w3c.github.io/webappsec-upgrade-insecure-requests/ (1 time)
• https://www.w3.org/TR/CSP1/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/navigate-to
Title: CSP: navigate-to
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src
Title: CSP: font-src
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src-attr
Title: CSP: script-src-attr
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/manifest-src
Title: CSP: manifest-src
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src
Title: CSP: img-src
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-src
Title: CSP: frame-src
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src-attr
Title: CSP: style-src-attr
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests
Title: CSP: upgrade-insecure-requests
on GitHub

• https://w3c.github.io/webappsec-upgrade-insecure-requests/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src-elem
Title: CSP: style-src-elem
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox
Title: CSP: sandbox
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/media-src
Title: CSP: media-src
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/object-src
Title: CSP: object-src
on GitHub

• https://csp.withgoogle.com/docs/strict-csp.html (1 time)
• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-to
Title: CSP: report-to
on GitHub

• https://w3c.github.io/webappsec-csp/ (4 times)
• https://wicg.github.io/reporting/ (15 times)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-uri
Title: CSP: report-uri
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/plugin-types
Title: CSP: plugin-types
on GitHub

• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/child-src
Title: CSP: child-src
on GitHub

• https://w3c.github.io/webappsec-csp/ (1 time)
• https://www.w3.org/TR/CSP2/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Security-Policy/worker-src
Title: CSP: worker-src
on GitHub

• https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/17415478/ (1 time)
• https://w3c.github.io/webappsec-csp/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Save-Data
Title: Save-Data
on GitHub

• https://css-tricks.com/help-users-save-data/ (1 time)
• https://datatracker.ietf.org/doc/html/draft-grigorik-http-client-hints-03 (1 time)
• https://developers.google.com/web/fundamentals/performance/optimizing-content-efficiency/save-data/ (1 time)
• https://tools.ietf.org/html/rfc7540 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Last-Modified
Title: Last-Modified
on GitHub

• https://tools.ietf.org/html/rfc7232 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/If-Modified-Since
Title: If-Modified-Since
on GitHub

• https://tools.ietf.org/html/rfc7232 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/magnetometer
Title: Feature-Policy: magnetometer
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/legacy-image-formats
Title: Feature-Policy: legacy-image-formats
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/gyroscope
Title: Feature-Policy: gyroscope
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/publickey-credentials-get
Title: Feature-Policy: publickey-credentials-get
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)
• https://w3c.github.io/webauthn/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/unoptimized-images
Title: Feature-Policy: unoptimized-images
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/ambient-light-sensor
Title: Feature-Policy: ambient-light-sensor
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/web-share
Title: web-share
on GitHub

• Permissions policy 'self' is at risk  w3c/web-share#169 (1 time)
• https://w3c.github.io/web-share/ (1 time)
• https://w3c.github.io/webappsec-permissions-policy/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/unsized-media
Title: Feature-Policy: unsized-media
on GitHub

• https://github.com/w3c/webappsec-feature-policy/blob/master/policies/unsized-media.md (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/vibrate
Title: Feature-Policy: vibrate
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/oversized-images
Title: Feature-Policy: oversized-images
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/accelerometer
Title: Feature-Policy: accelerometer
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)
• https://www.w3.org/TR/accelerometer/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/picture-in-picture
Title: Feature-Policy: picture-in-picture
on GitHub

• https://bugs.chromium.org/p/chromium/issues/detail?id=806249 (1 time)
• https://w3c.github.io/webappsec-permissions-policy/ (1 time)
• https://wicg.github.io/picture-in-picture/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/layout-animations
Title: Feature-Policy: layout-animations
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/usb
Title: Feature-Policy: usb
on GitHub

• https://w3c.github.io/webappsec-permissions-policy/ (1 time)
• https://wicg.github.io/webusb/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/sync-xhr
Title: Feature-Policy: sync-xhr
on GitHub

No external URLs

URL: /en-US/docs/Web/HTTP/Headers/Feature-Policy/screen-wake-lock
Title: Feature-Policy: screen-wake-lock
on GitHub

• https://w3c.github.io/screen-wake-lock/ (1 time)
• https://w3c.github.io/webappsec-permissions-policy/ (1 time)
• https://www.w3.org/TR/wake-lock/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Location
Title: Location
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Retry-After
Title: Retry-After
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)
• https://webmasters.googleblog.com/2011/01/how-to-deal-with-planned-site-downtime.html (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Content-Range
Title: Content-Range
on GitHub

• https://tools.ietf.org/html/rfc7233 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
Title: Access-Control-Allow-Methods
on GitHub

• https://fetch.spec.whatwg.org/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Referrer-Policy
Title: Referrer-Policy
on GitHub

• https://blog.mozilla.org/security/2015/01/21/meta-referrer/ (1 time)
• https://en.wikipedia.org/wiki/HTTP_referer (1 time)
• Point default referrer policy to a constant defined in RP spec whatwg/fetch#1066 (1 time)
• https://w3c.github.io/webappsec-referrer-policy/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
Title: Access-Control-Allow-Credentials
on GitHub

• https://fetch.spec.whatwg.org/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Accept-Ranges
Title: Accept-Ranges
on GitHub

• https://tools.ietf.org/html/rfc7233 (2 times)
• https://www.iana.org/assignments/http-parameters/http-parameters.xhtml (2 times)

URL: /en-US/docs/Web/HTTP/Headers/Public-Key-Pins
Title: Public-Key-Pins
on GitHub

• https://tools.ietf.org/html/rfc7469 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Digest
Title: Digest
on GitHub

• https://datatracker.ietf.org/doc/draft-ietf-httpbis-digest-headers (1 time)
• https://datatracker.ietf.org/doc/html/rfc3230 (2 times)
• https://datatracker.ietf.org/doc/html/rfc5843 (1 time)
• https://datatracker.ietf.org/doc/html/rfc7231 (1 time)
• https://www.rfc-editor.org/info/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/If-Match
Title: If-Match
on GitHub

• https://tools.ietf.org/html/rfc7232 (1 time)
• https://www.w3.org/1999/04/Editing/ (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Upgrade
Title: Upgrade
on GitHub

• https://tools.ietf.org/html/rfc7230 (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)
• https://tools.ietf.org/html/rfc7540 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
Title: Strict-Transport-Security
on GitHub

• https://blog.sidstamm.com/2010/08/http-strict-transport-security-has.html (1 time)
• https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Strict_Transport_Security_Cheat_Sheet.html (1 time)
• https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security (1 time)
• https://hacks.mozilla.org/2010/08/firefox-4-http-strict-transport-security-force-https/ (1 time)
• https://hg.mozilla.org/mozilla-central/raw-file/tip/security/manager/ssl/nsSTSPreloadList.inc (1 time)
• https://hstspreload.org (1 time)
• https://hstspreload.org/ (1 time)
• https://projects.dm.id.lv/Public-Key-Pins_test (1 time)
• https://tools.ietf.org/html/rfc6797 (1 time)
• https://www.chromium.org/hsts (1 time)

URL: /en-US/docs/Web/HTTP/Headers/If-Range
Title: If-Range
on GitHub

• https://tools.ietf.org/html/rfc7233 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/From
Title: From
on GitHub

• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Set-Cookie2
Title: Set-Cookie2
on GitHub

• https://tools.ietf.org/html/rfc2965 (1 time)
• https://tools.ietf.org/html/rfc6265 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Transfer-Encoding
Title: Transfer-Encoding
on GitHub

• https://datatracker.ietf.org/doc/html/rfc1950 (1 time)
• https://datatracker.ietf.org/doc/html/rfc1952 (1 time)
• https://en.wikipedia.org/wiki/Chunked_transfer_encoding (1 time)
• https://en.wikipedia.org/wiki/DEFLATE (1 time)
• https://en.wikipedia.org/wiki/LZ77_and_LZ78 (1 time)
• https://en.wikipedia.org/wiki/LZW (1 time)
• https://en.wikipedia.org/wiki/Zlib (1 time)
• https://tools.ietf.org/html/rfc7230 (1 time)
• https://wikipedia.org/wiki/HTTP/2 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Expires
Title: Expires
on GitHub

• https://tools.ietf.org/html/rfc7234 (1 time)

URL: /en-US/docs/Web/HTTP/Headers/Trailer
Title: Trailer
on GitHub

• https://en.wikipedia.org/wiki/Chunked_transfer_encoding (1 time)
• https://tools.ietf.org/html/rfc7230 (2 times)

URL: /en-US/docs/Web/HTTP/Headers/Content-Location
Title: Content-Location
on GitHub

• https://en.wikipedia.org/wiki/Comma-separated_values (1 time)
• https://tools.ietf.org/html/rfc7231 (1 time)

URL: /en-US/docs/Web/HTTP/CSP
Title: Content Security Policy (CSP)
on GitHub

• https://cspscanner.com/ (1 time)
• https://github.com/google/csp-evaluator (1 time)
• https://www.w3.org/TR/CSP/ (1 time)
• https://www.w3.org/TR/CSP2 (1 time)

URL: /en-US/docs/Web/Web_Components/HTML_Imports
Title: HTML Imports
on GitHub

• https://github.com/webcomponents/webcomponentsjs (1 time)
• https://hacks.mozilla.org/2015/06/the-state-of-web-components/ (1 time)
• https://w3c.github.io/webcomponents/spec/imports/ (1 time)

URL: /en-US/docs/Web/Events/Detecting_device_orientation
Title: Detecting device orientation
on GitHub

• https://github.com/wagerfield/parallax (1 time)
• https://w3c.github.io/deviceorientation/ (1 time)

URL: /en-US/docs/Web/EXSLT/math/min
Title: math:min()
on GitHub

• 🚨 http://www.exslt.org/regexp/functions/min/index.html (1 time)

URL: /en-US/docs/Web/Security/Subresource_Integrity
Title: Subresource Integrity
on GitHub

• https://fetch.spec.whatwg.org/ (1 time)
• https://frederik-braun.com/using-subresource-integrity.html (1 time)
• https://w3c-test.org/subresource-integrity/subresource-integrity.html (1 time)
• https://w3c.github.io/webappsec-subresource-integrity/ (1 time)
• https://www.srihash.org/ (2 times)