fail on unsafe html #3187
Merged
fail on unsafe html #3187
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
It worked! |
This reverts commit 8052dc1.
escattone
approved these changes
Mar 16, 2021
ytqxyd
added a commit
to ytqxyd/content
that referenced
this pull request
Mar 17, 2021
* Update index.html (mdn#2779) favour -> favor * Update index.html for BarcodeDetectionAPI (mdn#2784) Fix a missing closing parenthesis in code sample. * strict redirect validation on PR (mdn#2773) * Deprecate hgroup (mdn#2786) * Content-Length added to CORs safelisted headers (mdn#2766) * Access-Control-Expose-Headers clarification * Improve the description of safelisted headers * Content-Length - added to safelisted * FF86 Release note Co-authored-by: Michael[tm] Smith <mike@w3.org> * Update CSS “isolation” doc (mdn#2790) I added that it is often used in conjunction with z-index too, since it creates a new stacking context which does not interact with the content surrounding it. This is especially true for the body, which has a default z-index of auto and prevents the user from interacting with elements with a negative z-index if isolation is set to none. See https://coder-coder.com/z-index-isnt-working/ for more information. * Swap odd horizontal-vertical terms in CSS doc (mdn#2796) Fixes mdn#2789 * Fix/object is polyfill (mdn#2793) * chore(deps): bump @mdn/yari from 0.4.198 to 0.4.204 (mdn#2799) * HTTP Referrer-Policy - new default value in spec (mdn#2792) * HTTP Referer-Policy - new default value in spec * HTTP Referer header - better links to policy * Referer security concerns: minor subedit * Add release notes, improve directives * Drop old text about limited support for classes (mdn#2795) Fixes mdn#2791 * FF87 Preference for credentials in CORS preflight request (mdn#2558) * Update CORS doc with section on credentials in preflight * improve wording * Using Fetch: Fix flaws * Cross link to cors docs from Using Fetch * Add release note * Minor fix * Change not typically to should not * Fix up fetch API cookie sending mess * Update files/en-us/mozilla/firefox/releases/87/index.html Co-authored-by: Anne van Kesteren <annevk@annevk.nl> * Clarify when cross site cookies are sent * Fixes due to feedback from annevk * copy edit * copy edit * Fixes following feedback Co-authored-by: Anne van Kesteren <annevk@annevk.nl> Co-authored-by: Chris Mills <cmills@mozilla.com> * Add deprecated header to WebVR docs (mdn#2781) This change adds a deprecated header to the articles and subarticles for the following features: - VRDisplayCapabilities - VRDisplayEvent - VRDisplay - VREyeParameters - VRFrameData - VRLayerInit - VRPose - VRStageParameters Related: mdn#80 * rel note cleanup around the 86 release (mdn#2801) * Mark XPathException obsolete (mdn#2783) Related: mdn#80 * Mark WEBGL_compressed_texture_atc obsolete (mdn#2782) Related: mdn#80 * adding further emphasis on delete command (mdn#2800) * Update some() method description (mdn#2802) * revise text for US English spelling (mdn#2813) favour -> favor * fix: HTML validation issues (mdn#2814) - Depreceated `summary` on tables - Unopened STRONG and CODE tags - Duplicate IDs - Space in ID value * Substantial Fixes (mdn#2230) Co-authored-by: Eric Bailey <ericwbailey@users.noreply.github.com> Co-authored-by: Andrew Somers <Myndex@users.noreply.github.com> * Adding the missing CSS Ref Houdini overview (mdn#2780) * chore(deps): bump @mdn/yari from 0.4.204 to 0.4.210 (mdn#2820) * fix: flaws acrross learn, mozilla, api (mdn#2818) * Fixed cssxref errors in learn/css/css_layout/grids to prevent double-double parentheses from appearing (mdn#2808) * Remove never-supported MathML features (mdn#2691) * Remove never-supported MathML element <mglyph> * Remove never-supported MathML <math> attribute overflow * Remove never-supported MathML element <mlabeledtr> * Remove never-supported MathML <mo> attributes form, largeop * Remove never-supported MathML <mspace> attribute linebreak * Remove never-supported MathML <mystyle> attribute decimalpoint * Remove never-supported MathML <mtable> attributes: alignmentscope, columnwidth, equalcolumns, equalrows, groupalign, minlabelspacing, side * Remove never-supported MathML <mtd> attribute groupalign mdn/browser-compat-data#6958 * Remove never-supported MathML <mtr> attribute groupalign mdn/browser-compat-data#6958 * Remove more <mglyph> mentions * Remove more <mlabeledtr> mentions * Remove more <math> attribute overflow mentions * Remove more <mo> attributes form and largeop mentions * Remove more <mspace> attribute linebreak mentions * Remove more <mstyle> attribute decimalpoint mentions * Remove more mentions of <mtable> attributes: alignmentscope columnwidth equalcolumns equalrows groupalign minlabelspacing side * Remove more <mtd> attribute groupalign mentions * Remove more <mtr> attribute groupalign mentions * Remove columnwidth dd left behind in 7b2b659 * Typo: add Svelte tutorial to the list (mdn#2823) * Typo: add Svelte tutorial to the list * Fix link text and wording * Split pictureInPictureElement to avoid mixin page (mdn#2653) * yarn content move Web/API/DocumentOrShadowRoot/pictureInPictureElement Web/API/Document/pictureInPictureElement * Update document.pictureInPictureElement * Add propety to document interface page * Fix various links * Add property to ShadowRoot page * Change HTMLVideoElement to Element (as per spec) * Add new page for ShadowRoot.pictureInPictureElement * copy edit * Address feedback * Manually update wrong redirect Co-authored-by: Chris Mills <cmills@mozilla.com> * Mark WEBGL_compressed_texture_atc deprecated (mdn#2805) We use *deprecated* now (rather than *obsolete*). * Add Serial API Content (mdn#2700) * Add Serial interface and its members. * Add SerialPort interface and its members. * Tidy up of existing pages * Update files/en-us/web/api/serial/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/open/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/writable/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/ondisconnect/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/onconnect/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/onconnect/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serial/requestport/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serial/onconnect/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serial/requestport/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serialport/onconnect/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Update files/en-us/web/api/serial/index.html Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> Co-authored-by: Rachel Andrew <me@rachelandrew.co.uk> Co-authored-by: Rachel Andrew <rachel.andrew@edgeofmyseat.com> Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Tidy up of Values and Units page (mdn#2825) * Navigator.serial and WorkerNavigator.serial (mdn#2806) * Navigator.serial and WorkerNavigator.serial * Update files/en-us/web/api/navigator/serial/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/workernavigator/serial/index.html Co-authored-by: Joe Medley <jmedley@google.com> Co-authored-by: Joe Medley <jmedley@google.com> * text revision for US English spelling (mdn#2832) flavour -> flavor * fix Web/API/XRWebGLLayer/getNativeFramebufferScaleFactor flaws (mdn#2830) * docs: rephrase <nobr> situation statement (mdn#2838) Addressing the fact that `nobr` does enjoy wide support. * fix: HTML Validation issues (mdn#2835) * fix: HTML validation issue (mdn#2843) * fix: Empty figure/figcaption (mdn#2841) * Removed errant < within H3 heading (mdn#2846) "Methods of the Date object" had an errant '<' visible within text. Originally "Methods of the Date< object" * chore(deps): bump @mdn/yari from 0.4.210 to 0.4.221 (mdn#2847) * flaws and double brackets in image (mdn#2855) * flaws and double brackets in image * fix * Update href to correct section (mdn#2828) - match the "mid-air collisions" to the corresponding reference * Mark XPathException deprecated (ersatz obsolete) (mdn#2807) * Re-do of the functions page (mdn#2854) * Fix broken link (mdn#2845) * Typo in ReadableStreamBYOBReader doc (mdn#2864) * revise text for US English spelling (mdn#2863) flavour -> flavor * Mark navigator.javaEnabled() as not-readonly (mdn#2865) * chore(deps): bump @mdn/yari from 0.4.221 to 0.4.231 (mdn#2870) * Make the PWA code more modern and readable (mdn#1207) * Make the PWA code more modern and readable * curly braces * escape < * remove log * Drop mglyph and mlabeledtr from redirects file (mdn#2871) The mglyph and mlabeledtr articles were removed in 44112ad (mdn#2691), but some dangling redirects got left behind. mdn#2866 (comment) is a CI failure this caused. * Drop "Properties included from Slotable" section of Element doc (mdn#2873) * typo fix ("it's" to "its") (mdn#2876) * run redirect checks on content change (mdn#2875) In case something got moved or deleted. * link AggregateError to the latest spec (mdn#2880) * Update Fixed Typo (mdn#2872) This fixes typo in the example section . * Changes to margin-block and margin-inline (mdn#2859) * Fixed cssxref errors in learn/css/css_layout/grids to prevent double-double parentheses from appearing * Upgraded LiveSample for margin-inline * Upgraded LiveSample for margin-inline * Upgraded LiveSample for margin-block * Tweaked LiveSample for margin-inline * Tweaked LiveSample for margin-block * Minor edit to margin-block * Minor edits to margin-block and margin-inline * clipboarditem updates (mdn#2829) * clipboarditem updates * casing * dancing * dancing * Update files/en-us/web/api/clipboarditem/clipboarditem/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/clipboarditem/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/clipboarditem/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/clipboarditem/presentationstyle/index.html Co-authored-by: Joe Medley <jmedley@google.com> * fixes Co-authored-by: Joe Medley <jmedley@google.com> * Fix Beacon API and page lifecycle event guidance (mdn#2866) * Issue 2692: Update Beacon API docs * Issue 2692: Update event pages * Issue 2692: delete 'Using the Beacon API' * Fix _redirects file * Fix _redirects.txt Ran `yarn content fix-redirects en-us` and it fixed the _redirects.txt file — by moving the /en-US/docs/Web/API/Beacon_API/Using_the_Beacon_API line where it’s apparently expected. From that I infer the problem was that the linter expects the file to be sorted, and the /en-US/docs/Web/API/Beacon_API/Using_the_Beacon_API line was out of sort order. * Copy-edit: improve wording Co-authored-by: Michael[tm] Smith <mike@w3.org> * Copy-edit: improve wording Co-authored-by: Michael[tm] Smith <mike@w3.org> * Use an ordered list for a series of linked steps Co-authored-by: Michael[tm] Smith <mike@w3.org> * Use an ordered list for a series of linked steps Co-authored-by: Michael[tm] Smith <mike@w3.org> * Use en-US spelling Co-authored-by: Michael[tm] Smith <mike@w3.org> * Use an ordered list for a series of linked steps Co-authored-by: Michael[tm] Smith <mike@w3.org> * Copy-edit: improve wording Co-authored-by: Michael[tm] Smith <mike@w3.org> * Use an ordered list for a series of linked steps Co-authored-by: Michael[tm] Smith <mike@w3.org> * Copy-edit: improve wording Co-authored-by: Michael[tm] Smith <mike@w3.org> Co-authored-by: Michael[tm] Smith <mike@w3.org> * Fix typo slotable -> slottable (mdn#2826) * Update spelling to en-US: "organise"->"organize" (mdn#2495) * Update index.html organise -> organize * Update files/en-us/learn/server-side/django/admin_site/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> * Spelling fix (mdn#2885) Fixed the spelling of "follow" from "follw" in the "HTML attribute: step" documentation page * Fix spec link in showOpenFilePicker doc (mdn#2737) * Push the “fixable flaws” button * Fix spec link in showOpenFilePicker doc Fixes mdn#2337 * Update files/en-us/web/api/window/showopenfilepicker/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> Co-authored-by: wbamberg <will@bootbonnet.ca> * Added a note regarding permissions to FileSystemFileHandle doc (mdn#2891) * Note that argument passed to Map() is optional. (mdn#2889) * Update the links to KumaScript macros in the Yari repo. (mdn#2888) * Removed unneccessary part, Fixes mdn#2896 (mdn#2899) * Added reference to the File System Access API (mdn#2574) * Added reference to the File System Access API This page currently lists Ajax solutions as the only option for read files by pathname, but it should also reference the File System Access API. * Whoops, forgot a closing paren * Updated first two agreed changes * Clarify restrictions on FileReader; remove note formatting Co-authored-by: Will <> * Add inline experimental icon to the `loading` attribute (mdn#2890) * Document that the only valid octal escape sequence is \0 (mdn#2905) * Removed redundant parentheses (mdn#2904) Removed reduntant parentheses from CSS attr() function reference * fixing broken Three.js links (mdn#2604) * Fix self-link to page as per issue 2911 (mdn#2913) * Fix up link to http session (mdn#2914) * use const instead of let declaration for some vars (mdn#2912) In the live version of the sequencer this page describes how to create, there exists a commit that does the same thing as this commit does for this page, except it does it for all applicable variable declarations, instead of the subset I verified on this page. There are probably more variable declarations that can use `const` instead of `let` on this page. See mdn/webaudio-examples@1217eb8. * Use US English “dialog” (mdn#2900) * Fix minor issue in 'using screen capture api' article (mdn#2916) * Mention case sensitivity in lead of String.p.includes doc (mdn#2908) It is rather key that `includes` performs a _case-sensitive_ search for the `searchString` provided. As such, I thought it would be good to include this in the opening paragraph. * Fix grammar error in CSS content-visibility doc (mdn#2917) * Readability improvement for “Web Audio API best practices” doc (mdn#2901) * Fix Django BookInstance.book model to have null default value (mdn#2798) * chore(deps): bump @mdn/yari from 0.4.231 to 0.4.238 (mdn#2922) * Fix typo in web/api/console (mdn#2920) * Fix spec URL for CSS "syntax" @Property (mdn#2924) * List hgroup only as a deprecated element (mdn#2902) The `hgroup` element is deprecated. It is currently listed at the bottom of the [HTML elements reference page](https://developer.mozilla.org/en-US/docs/Web/HTML/Element) under the [Obsolete and deprecated elements](https://developer.mozilla.org/en-US/docs/Web/HTML/Element#obsolete_and_deprecated_elements) section, but also appears alongside non-deprecated elements in the [Content sectioning](https://developer.mozilla.org/en-US/docs/Web/HTML/Element#content_sectioning) section. Removing this tag will remove it from the section of non-deprecated elements, created from the reference on [line 38 of elements/index.html](https://github.com/mdn/content/blob/f37c24de21200c64921064e536ea591d71df6cb3/files/en-us/web/html/element/index.html#L38). * FF87 Color scheme simulation updates (mdn#2562) * Experimental features: remove color-scheme-simulation pref * Cross link the media query to the developer tools * Initial work on Examine/edit CSS page * Fix up images and docs * Add release note for FF87 * Also add see also link to page inspector tools * Compressed images * Fixes following feedback * updates following bcd feedback * small correction Co-authored-by: Chris Mills <cmills@mozilla.com> * Clarify what gets percent-encoded in data URLs (mdn#2856) * Push the “fixable flaws” button * Clarify what gets percent-encoded in data URLs Also fixes mdn#2840 * Fix Battery API spec link to Permissions Policy (mdn#2925) * adding issue/pr templates (mdn#2906) * adding issue/pr templates * clarifying text as per sideshowbarker comment * remove stray comma * Fix Selection stringifier — toString() — spec url (mdn#2923) * Deprecate NavigatorPlugins, its subfeatures, and related objects (mdn#2869) https://html.spec.whatwg.org/multipage/obsolete.html#navigatorplugins Related BCD change: mdn/browser-compat-data#9338 * Doc that navigator.javaEnabled() is always false (mdn#2867) https://html.spec.whatwg.org/multipage/obsolete.html#dom-navigator-javaenabled Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * Remove members from ClipboardItem doc (mdn#2934) Removing lastModified, delayed and createDelayed(). As we are not adding them to BCD it's also confusing to have them on the landing page. * fix non-rendering variable text * Fix a typo in the README (mdn#2926) * Moving beforeinput & getTargetRanges to release notes (mdn#2939) * updates * copy edit * copy edit * copy edit Co-authored-by: Chris Mills <cmills@mozilla.com> * Trusted Types API Overview (mdn#2883) * Trusted Types API Overview * Update files/en-us/web/api/trusted_types_api/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/trusted_types_api/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/trusted_types_api/index.html Co-authored-by: Joe Medley <jmedley@google.com> * Update files/en-us/web/api/trusted_types_api/index.html Co-authored-by: Joe Medley <jmedley@google.com> Co-authored-by: Joe Medley <jmedley@google.com> * Clarify that lastIndex is RegExp instance property, not a static property (mdn#2725) * Push the “fixable flaws” button * Clarify: lastIndex is RegExp instance property This change updates the RegExp article to correct a misclassification of lastIndex as a static property; it’s not a static property, but instead an instance property. However, it’s not a property of RegExp.prototype but instead is only exposed from RegExp instances — so this change adds some special-casing for that in the article for lastIndex itself, as well as in the RegExp article. Fixes mdn#2708 * Use "RegExp: lastIndex" in list * Update index.html (mdn#2951) dialogue -> dialog * Adds pages for rgb() and rgba() (mdn#2929) * Put Comma at the right Place (mdn#2950) Fixes mdn#2658 * Adds hsl() and hsla() notation (mdn#2938) * Remove extra space inside <code> element (mdn#2948) * Add missing aria-atomic attribute to example (mdn#2949) * Fix deep link in “web and XML development using the DOM” (mdn#2953) * Add <code></code> tags to header in JS Boolean doc (consistency) (mdn#2956) This achieves consistency with a similar header that uses <code></code> tags, in the same article. * fix external image flaws in Web/JavaScript (mdn#2945) * fix external image flaws in Web/API (mdn#2943) * Split pointerLockElement to avoid mixin page (mdn#2940) * Add separate page for DOMParser.parseFromString (mdn#2957) * Split out DOMParser.parseFromString; fix various errors and omissions in the DOMParser docs * Escape HTML in examples * Fix fixable flaws * "a HTML Document" -> "an HTML Document" Co-authored-by: Michael[tm] Smith <mike@w3.org> * "a HTML" -> "an HTML" Co-authored-by: Michael[tm] Smith <mike@w3.org> * Code formatting for MIME type Co-authored-by: Michael[tm] Smith <mike@w3.org> Co-authored-by: Will <> Co-authored-by: Michael[tm] Smith <mike@w3.org> * Fix missing words in Access-Control-Expose-Headers (mdn#2963) * `<wbr>` is an element, not a property; also improved grammar. (mdn#2931) * `<wbr>` is an element, not a property; grammar. * Rephrase sentence for correctness and simplicity * Update files/en-us/web/css/css_text/wrapping_text/index.html Co-authored-by: Rachel Andrew <me@rachelandrew.co.uk> * Add BigInt to JS “Equality comparisons and sameness” table (mdn#2285) Fixes mdn#2237 * Fix fixable flaws in JS “Equality comparisons and sameness” doc * Annotate notations in JS “Equality comparisons and sameness” table * Fix “Handling text — strings in JavaScript” typo (mdn#2961) Fixes mdn#2959 * Perceived performance update (mdn#2918) * Perceived performance - reorg * Feedback fixes and cut back glossary * Further fixes * Remove 3 PasswordCredential attributes which were unshipped (mdn#2969) See mdn/browser-compat-data#9400. * fix external images flaws in Web/API (mdn#2974) * fix external images flaws in Web/API (2) (mdn#2975) * Fix typo in web/api/orientationsensor (mdn#2976) * Add proper Document.stylesheets/ShadowRoot.styleSheets; no mixin (mdn#2972) * Remove docs for DocumentOrShadowRoot.msElementsFromRect (mdn#2977) * chore(deps): bump @mdn/yari from 0.4.238 to 0.4.244 (mdn#2979) Bumps [@mdn/yari](https://github.com/mdn/yari) from 0.4.238 to 0.4.244. - [Release notes](https://github.com/mdn/yari/releases) - [Changelog](https://github.com/mdn/yari/blob/main/docs/npm-releases.md) - [Commits](mdn/yari@v0.4.238...v0.4.244) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Update index.html (mdn#2983) dialogue -> dialog * Fix broken links in NSS project (mdn#2960) * Fix broken links in NSS project * Update files/en-us/mozilla/projects/nss/ssl_functions/old_ssl_reference/index.html Co-authored-by: Peter Bengtsson <peterbe@mozilla.com> Co-authored-by: Peter Bengtsson <peterbe@mozilla.com> * Iss2966 (mdn#2984) * Updated Typo Fixes mdn#2658 * removed const n = 15, Fixes mdn#2966 * Fixes #iss2521 (mdn#2527) * Fixes #iss2521 * Added the suggested changes * Splitted it in 3 sections * Update files/en-us/web/javascript/reference/operators/instanceof/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> * Update files/en-us/web/javascript/reference/operators/instanceof/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> * Update files/en-us/web/javascript/reference/operators/instanceof/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> * Update files/en-us/web/javascript/reference/operators/instanceof/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> * Remove extra heading Co-authored-by: wbamberg <will@bootbonnet.ca> Co-authored-by: Will <> * fix flaws in Web/API/EffectTiming/easing (mdn#2982) * Fix typo in “Vue conditional rendering: editing existing todos” (mdn#2989) * adding doc priorities explainer (mdn#2937) * adding doc priorities explainer * updates based on wbamberg feedback * add numbers of documents in each tree/tier * alphabetize all the things * glossary entry for Khronos Group (mdn#2994) * glossary entry * copy edit Co-authored-by: Chris Mills <cmills@mozilla.com> * Update ConstrainLong to ConstrainULong everywhere (mdn#2995) It's already a redirect. Also one last instance of LongRange. * Removed doubled entry, Fixes mdn#2935 (mdn#2991) * Update index.html (mdn#2564) There need a comma in the last list. * Document "url" support in tabs.onUpdated's properties filter (mdn#3003) ref https://bugzilla.mozilla.org/show_bug.cgi?id=1680279 * chore(deps): bump @mdn/yari from 0.4.244 to 0.4.248 (mdn#2998) Bumps [@mdn/yari](https://github.com/mdn/yari) from 0.4.244 to 0.4.248. - [Release notes](https://github.com/mdn/yari/releases) - [Changelog](https://github.com/mdn/yari/blob/main/docs/npm-releases.md) - [Commits](mdn/yari@v0.4.244...v0.4.248) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * making the example clearer (mdn#2996) * CSS Cookbook: Making examples easier to read and fixing raised issue (mdn#2997) * fixing problem and moving example (mdn#2993) Co-authored-by: Eric Bailey <ericwbailey@users.noreply.github.com> * Fixable flaws on the color_value page (mdn#2930) Co-authored-by: Eric Bailey <ericwbailey@users.noreply.github.com> * fix: flaws in web/api/d* (mdn#2834) * fix: HTML validation issues (mdn#3014) * fix broken image in Learn/HTML/Cheatsheet (mdn#3012) * Fix grammar in note in CSP default-src doc (mdn#3007) * csp: script-src: examples: avoid id collision (mdn#3008) Avoids an id/anchor collision between Example's and Sources's strict-dynamic sections. This document embeds the Sources section from `Web/HTTP/Headers/Content-Security-Policy/default-src` which already sets a `strict-dynamic` id, and both end up in the resulting page[1]. Consequently, the `strict-dynamic` anchor in this document here - the second one in the DOM - was not linkable as desired. This change is a bit desperate as it is only a manual solution for the one problem I spotted. A systemic solution would be preferred. I can envision e.g. consistently tagging the sources - so all of them become linkable - and doing so with a "sources" prefix to limit the likelihood of collisions but that would break existing links/bookmarks. I assume this is not the first time a problem like this popped up in a large project like this and maybe someone has a goto solution which can be applied as a follow-up. [1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src * fix external image flaws in Web/API (2) (mdn#3000) * fix external image flaws in Web/API (mdn#2999) * Fix 404 in “2D collision detection” doc (mdn#3015) * style(HTML): put the word footer inside the code tag for more readability (mdn#3020) * Add visibility: collapse for ruby annotation (mdn#3022) * Add a BCD table to the Subgrid page (mdn#3024) There's also a "css.properties.grid-template-rows.subgrid" entry in BCD, but its status should be the same. * adding complete beginner starter guides (mdn#2874) * adding complte beginner starter guides * fixing markdown linting errors * chore(deps): bump @mdn/yari from 0.4.248 to 0.4.253 (mdn#3018) Bumps [@mdn/yari](https://github.com/mdn/yari) from 0.4.248 to 0.4.253. - [Release notes](https://github.com/mdn/yari/releases) - [Changelog](https://github.com/mdn/yari/blob/main/docs/npm-releases.md) - [Commits](mdn/yari@v0.4.248...v0.4.253) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * adding shared processes (mdn#2947) * adding shared processes * making changes to address Ryuno-Ki comments * add initial rfc to repo (mdn#3011) * add initial rfc to repo * update table markdown, add rfcs to markdown linting * Remove "misunderstood" link Fixes mdn#3030 * Split DocumentOrShadowRoot/getAnimations mixin page under real interface pages (mdn#3029) * Move page and update links * Add docs for ShadowRoot.getAnimations * Remove Response.useFinalURL (mdn#3031) This appears to have never been a real thing. See mdn/browser-compat-data#9386 * fix external image flaws in Web/Media (mdn#3032) * fix external image flaws in WebAssembly (mdn#3033) * style(HTML): remove extra parenthesis (mdn#3034) * fix: HTML Validation issue (mdn#3041) * text revision for US English spelling and clarity (mdn#3049) dialogue -> speech * fix: flaws in web/api/e* batch 1 (mdn#3042) * fix external image flaws in Web/Web_Components/Using_shadow_DOM (mdn#3040) * grammar fix in PULL_REQUEST_TEMPLATE (mdn#3039) * Added example Fixes mdn#2944 (mdn#3036) * Move DocumentOrShadowRoot.getSelection to Document.getSelection (mdn#3037) * yarn content move Web/API/DocumentOrShadowRoot/getSelection Web/API/Document/getSelection * Update document.getSelection page * Update links * Add () * Update the overflow doc to meantion that clip does not create a BFC (mdn#3057) * fix: flaws in web/api/g* (mdn#3046) * fix: flaws in web/api/f* batch 1 (mdn#3044) * Improve clarity and grammar (mdn#3009) Improve grammar, clarity and readability. Previously, there was some strange wording (words out of order and an odd use of "in case") that caused some head scratching. This change improves the readability of this complex subject (WeakMaps and garbage collection). * update localization team members (mdn#3058) * update localization team members * make "Current contributors" consistent * chore(deps): bump @mdn/yari from 0.4.253 to 0.4.269 (mdn#3065) Bumps [@mdn/yari](https://github.com/mdn/yari) from 0.4.253 to 0.4.269. - [Release notes](https://github.com/mdn/yari/releases) - [Changelog](https://github.com/mdn/yari/blob/main/docs/npm-releases.md) - [Commits](mdn/yari@v0.4.253...v0.4.269) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Fix dead link to mdn.github.io page (mdn#3070) * fix the auto-merge workflow (mdn#3071) * chore(deps): bump @mdn/yari from 0.4.269 to 0.4.274 (mdn#3073) * improve readability of "AudioBuffer" documentation (mdn#3074) All this commit does is change <p>Objects of these types are designed to hold small audio snippets, typically less than 45 s. For longer sounds, objects implementing the {{domxref("MediaElementAudioSourceNode")}} are more suitable. The buffer contains data in the following format: non-interleaved IEEE754 32-bit linear PCM with a nominal range between <code>-1</code> and <code>+1</code>, that is, 32bits floating point buffer, with each samples between -1.0 and 1.0. If the {{domxref("AudioBuffer")}} has multiple channels, they are stored in separate buffer.</p> to <p>Objects of these types are designed to hold small audio snippets, typically less than 45 s. For longer sounds, objects implementing the {{domxref("MediaElementAudioSourceNode")}} are more suitable. The buffer contains data in the following format: non-interleaved IEEE754 32-bit linear PCM with a nominal range between <code>-1</code> and <code>+1</code>, that is, a 32-bit floating point buffer, with each sample between -1.0 and 1.0. If the {{domxref("AudioBuffer")}} has multiple channels, they are stored in separate buffers.</p> * Updated - web/api/node/index.html (mdn#3068) This fixes typo in the document . * chore(deps): bump ahmadnassri/action-dependabot-auto-merge (mdn#3017) Bumps [ahmadnassri/action-dependabot-auto-merge](https://github.com/ahmadnassri/action-dependabot-auto-merge) from v2.3 to v2.4. - [Release notes](https://github.com/ahmadnassri/action-dependabot-auto-merge/releases) - [Commits](ahmadnassri/action-dependabot-auto-merge@v2.3...2aef6bb) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * cache node_modules the same in all workflows (mdn#3077) * chore(deps): bump @mdn/yari from 0.4.274 to 0.4.279 (mdn#3085) * style(HTML): put the word section inside the code tag for more readability (mdn#3092) * fix: mismatched heading tag (mdn#3087) * Mentions for the whatsdeployed link for translated-content (mdn#3086) Related to mdn/translated-content#124 I think it might be a good idea to also mention the translated-content Whatsdeployed link here too. Good to have. * Fix typo (mdn#3083) * Update index.html (mdn#3079) Fixed plenking, some capitalization, missing images. * Repairs sentence structure (mdn#3094) Looks as though the original author unintentionally left out "to" in this context. * Removed missing images. (mdn#3078) * Show how to set resolution and frame rate (mdn#2698) * Show how to set resolution and frame rate I was searching myself crazy on how to set the resolution and frame rate, and even thought that it's impossible to control, until I found that they are set in getUserMedia(). Make a note where this is set, to save others the headache. * Make it a second note box * Add notecard class * Fix incorrectly placed note in rel attribute page (mdn#3072) A note about rel="alternate" was placed under the definition for rel="author" instead. * Link types: noopener - add note about new default (mdn#3089) noopener is now implicitly set on `_blank` by default * Copy edits to ARIA “Using the link role” doc (mdn#3075) * Move caretPositionFromPoint to Document (mdn#3067) * Drop unneeded “else” after “throw” in “async and await” how-to (mdn#3081) * remove references to developer.cdn.mozilla.net (mdn#3130) * Removed the missleading [,...] (mdn#3128) * Removed the missleading [,...] syntax, wrote it here just with two parameters because in the paragraph it is explicit saying column is optional), Fixes mdn#3126 * Make data optional Co-authored-by: Hamish Willee <hamishwillee@gmail.com> * Fixed YouTube video ID (mdn#3100) * point to Node.js LTS docs (mdn#3105) * Update Firefox User-Agent string reference for Mac OS X (mdn#2955) * Firefox no longer supports PPC Mac OS X So remove mention of PPC Mac OS X. * Firefox 87 caps Mac OS X version at 10.15 This change was made in https://bugzilla.mozilla.org/show_bug.cgi?id=1679929 to work around webcompat problems from websites that broke when the User-Agent string reported "Mac OS X 11.0". Safari also caps the reported Mac OS X version at 10.15 and Chrome plans to cap soon, too. * Restore "PPC Mac OS X" User-Agent string example But note that Firefox no longer officially supports Mac OS X on PowerPC. * fix: flaws in web/api/e* batch 2 (mdn#3043) * Update MDN/Contribute/Localize (mdn#3123) Update the discussion place of Japanese translation community - Google Group is less used - Slack and GitHub is actively used * Add example of array destructuring (mdn#3118) * Replace polyfill link in “Detecting device orientation” doc (mdn#3093) gyroscope.js is not maintained anymore, so replaced it with parallax * fix: flaws in web/api/f* batch 2 (mdn#3045) * Clean up flaws and indents of SVG/attributes/a (mdn#2731) Signed-off-by: André Jaenisch <andre.jaenisch@posteo.de> * "Sorting with map": clarify example (mdn#3133) Fixes mdn#3115 * Add information about firefox default preferences (mdn#2954) * Add information about firefox default preferences * Fix up following feedback * Remove StorageQuota documentation (mdn#3142) It appears to never have been shipped and is now long removed: mdn/browser-compat-data#9459 * More NSS project fixes (mdn#3134) * More NSS project fixes * More fixes * Add more links * Last set of fixes * Yet more * Move DocumentOrShadowRoot.element(s)FromPoint to Document.element(s)FromPoint (mdn#3069) * Move DocumentOrShadowRoot.elementFromPoint to Document.elementFromPoint * Move DocumentOrShadowRoot.elementsFromPoint to Document.elementsFromPoint * merge redirect into correct position * chore(deps): bump @mdn/yari from 0.4.279 to 0.4.280 (mdn#3147) * Fix flaws in “A re-introduction to JavaScript” (mdn#3136) Pushed the “fix fixable flaws” button. * fix: flaws in web/api/h* batch 2 (mdn#3084) * Remove DocumentOrShadowRoot mixin page (mdn#3146) * don't apply brush for CSSSyntax + remove pre (mdn#3149) ``` s/<pre.*>(\{\{csssyntax(\(.*\))?\}\})\n?</pre>/$1/g ``` * Remove rogue body tag in CSS offset page (mdn#3157) * Adding lab() and lch() (mdn#3145) * adding page for hwb() (mdn#3141) * Update index.html (mdn#3159) optimise -> optimize summarise -> summarize * Adding clipboarditem to experimental notes (mdn#2857) * adding clipboarditem to experimental notes * fixes Co-authored-by: Chris Mills <cmills@mozilla.com> * Fix typo: aria-colcount → aria-rowcount in ARIA table role docs (mdn#3167) * fix: flaws in web/api/h* batch 1 (mdn#3082) * fix: flaws in web/api/h* batch 1 * fix: point to /Web/API/SubtleCrypto/digest#supported_algorithms * Update files/en-us/web/api/hashchangeevent/index.html Co-authored-by: wbamberg <will@bootbonnet.ca> Co-authored-by: wbamberg <will@bootbonnet.ca> * Clarify in Body.json() doc that it returns a JS object, not JSON (mdn#3098) Co-authored-by: Michael[tm] Smith <mike@w3.org> * Flex shorthand links and HTML entities inside IDs (mdn#3169) * Remove HTML entities from ids * Use consistent link type * CORS: Clarify what XHR upload event-listening triggers preflight (mdn#3138) * fix(ReadableStreamDefaultReader): jsref -> jsxref (mdn#3170) * Add link to microtask_guide (mdn#2815) Related: mdn#1584 * chore(deps): bump @mdn/yari from 0.4.280 to 0.4.289 (mdn#3171) * Use datatracker URLs for IETF documents rather than tools.ietf.org (mdn#3174) tools.ietf.org are being deprecated per https://mailarchive.ietf.org/arch/msg/tools-discuss/oYrAxb3KayPzZ4SNB1DVZTDPPNo/ changes generated with rg -l https://tools.ietf.org/html * Fixes to subnav (mdn#3165) * Fixes to subnav * Remove remaining subnavs * Replace all /css section quicklinks with sidebar macro * Fixes mdn#2878 (mdn#2879) * Fixes mdn#2878 * made it lowercase, Fixes mdn#2878 * Updating the id so the link works Also added a sentence case as per discussion * Also updating ids Heading ids should be lowercase Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> * New Glossary Page Fixes mdn#2682 (mdn#2695) * My First Site, Added Glossary Site and fixed the link to device_pixel instead of device_pixels, Fixes mdn#2682 * Applied the Feedback * copy edit Co-authored-by: Chris Mills <cmills@mozilla.com> * Sentence case (mdn#3185) * Fix FileSystemHandle references to File and Directory API (mdn#3168) Co-authored-by: Will <> * Correct the Date.p.getTimezoneOffset() doc (mdn#893) * Correct the Date.p.getTimezoneOffset() doc Fixes mdn#665 * More precisely describe getTimezoneOffset() * Clarify what "local time zone" means * Update code comment to clarify effect of DST * Clarify that Date.p.setDate() uses local time (mdn#3172) Fixes mdn#2833 * Recommend Number.isNaN(), not global isNan() (mdn#3135) * Recommend Number.isNaN(), not global isNan() Fixes mdn#3026 * Add links to more-detailed explanations * Apply suggestions from code review Co-authored-by: Florian Scholz <fscholz@mozilla.com> Co-authored-by: Florian Scholz <fscholz@mozilla.com> * Added missing attribute name references (mdn#1712) (mdn#3166) Added links to missing single-element and global attribute references. * Update documentation for forced colors mode (mdn#2819) * FF87 removing -moz media features (mdn#2567) * removing -moz media features * copy edit Co-authored-by: Chris Mills <cmills@mozilla.com> * fail on unsafe html (mdn#3187) * fail on unsafe html * a deliberately unsafe injection attempt * Revert "a deliberately unsafe injection attempt" This reverts commit 8052dc1. * Switch to different svg stop-opacity compat data (mdn#3156) Related to mdn/browser-compat-data#9402 * copy editing Fx 87 rel notes (mdn#3194) * fix: HTML Validation issues (mdn#3198) * Fix spec URL in Cross-Origin-Opener-Policy doc (mdn#3193) There is no the-cross-origin-opener-policy-header anchor in the HTML spec; instead the best place for the MDN article to link to is the the-headers anchor, which has the following text: > A Document's cross-origin opener policy is derived from the > `Cross-Origin-Opener-Policy` and the > `Cross-Origin-Opener-Policy-Report-Only` HTTP response headers. These > headers are structured headers whose value must be a token. * fix: flaws in web/x* (mdn#3204) * fix: flaws in web/o-r* (mdn#3208) Co-authored-by: Tim O'Haver <64042475+timohaver@users.noreply.github.com> Co-authored-by: Baptiste Laget <blaget@cloudraker.com> Co-authored-by: Florian Dieminger <me@fiji-flo.de> Co-authored-by: Eric Bailey <ericwbailey@users.noreply.github.com> Co-authored-by: Hamish Willee <hamishwillee@gmail.com> Co-authored-by: gadhdhds <79879747+gadhdhds@users.noreply.github.com> Co-authored-by: Michael[tm] Smith <mike@w3.org> Co-authored-by: Catherine Cheng <jieyun.cheng@sce.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Anne van Kesteren <annevk@annevk.nl> Co-authored-by: Chris Mills <cmills@mozilla.com> Co-authored-by: Akash Negi <55234838+NegiAkash890@users.noreply.github.com> Co-authored-by: Nick Schonning <nschonni@gmail.com> Co-authored-by: Andrew Somers <42009457+Myndex@users.noreply.github.com> Co-authored-by: Andrew Somers <Myndex@users.noreply.github.com> Co-authored-by: Rachel Andrew <rachel.andrew@edgeofmyseat.com> Co-authored-by: Eric A. Meyer <eric@meyerweb.com> Co-authored-by: Daniel D. Beck <daniel@ddbeck.com> Co-authored-by: Olivier Moindrot <omoindrot@gmail.com> Co-authored-by: Florian Scholz <fscholz@mozilla.com> Co-authored-by: Joe Medley <jmedley@google.com> Co-authored-by: Rachel Andrew <me@rachelandrew.co.uk> Co-authored-by: Ruth John <Rumyra@users.noreply.github.com> Co-authored-by: Peter Bengtsson <mail@peterbe.com> Co-authored-by: Jens Oliver Meiert <jens@meiert.com> Co-authored-by: Lorin Halpert <me@lorinhalpert.com> Co-authored-by: Albin Hasani <albihasani94@gmail.com> Co-authored-by: Hel <42438719+helliosa@users.noreply.github.com> Co-authored-by: Jarred Sumner <jarred@jarredsumner.com> Co-authored-by: shadowtime2000 <66655515+shadowtime2000@users.noreply.github.com> Co-authored-by: Nino Filiu <nino.filiu@gmail.com> Co-authored-by: kilyerd <kilyerd@users.noreply.github.com> Co-authored-by: Antoine du Hamel <duhamelantoine1995@gmail.com> Co-authored-by: wbamberg <will@bootbonnet.ca> Co-authored-by: badralshaer <badr.alshaer@gmail.com> Co-authored-by: James Gentes <jgentes@users.noreply.github.com> Co-authored-by: Kartik Soneji <kartiksoneji@rocketmail.com> Co-authored-by: Alexander Heß <44900696+CreaTorAlexander@users.noreply.github.com> Co-authored-by: xp44mm <34696643@qq.com> Co-authored-by: Victor Westerlund <hello@victorwesterlund.com> Co-authored-by: Hamir Mahal <hamirmahal@gmail.com> Co-authored-by: Nick Yamane <nick@diegoyam.com> Co-authored-by: Schalk Neethling <sneethling@mozilla.com> Co-authored-by: Lucas Genzelis <lucas.genzelis@pager.com> Co-authored-by: xufanglu <3146974+likev@users.noreply.github.com> Co-authored-by: Dylan Smith <dylanatsmith@gmail.com> Co-authored-by: Sylvestre Ledru <sledru@mozilla.com> Co-authored-by: Alan Carpilovsky <8486092+alcar@users.noreply.github.com> Co-authored-by: Volker Mische <volker.mische@gmail.com> Co-authored-by: Andrii Denysenko <andrey2850@gmail.com> Co-authored-by: Sebastian Simon <37915283+SebastianSimon@users.noreply.github.com> Co-authored-by: Vodimed <67785939+Kim-R2O@users.noreply.github.com> Co-authored-by: Philip Jägenstedt <philip@foolip.org> Co-authored-by: Jordan Collins <JordanCollins@users.noreply.github.com> Co-authored-by: Peter Bengtsson <peterbe@mozilla.com> Co-authored-by: Morgan <morganpstanley@gmail.com> Co-authored-by: Atif <76681745+mdatif796@users.noreply.github.com> Co-authored-by: Rob Wu <rob@robwu.nl> Co-authored-by: wiese <wiese@users.noreply.github.com> Co-authored-by: vooxal <58456527+vooxal@users.noreply.github.com> Co-authored-by: maryamrmz <maryam.rpour@gmail.com> Co-authored-by: Xidorn Quan <github@upsuper.org> Co-authored-by: Christophe Coevoet <stof@notk.org> Co-authored-by: Jonathan Bell <jonathanbell.ca@gmail.com> Co-authored-by: Joe Farro <joe.farro@datadoghq.com> Co-authored-by: Davide Briano <36935593+buondevid@users.noreply.github.com> Co-authored-by: Alien426 <alien426@gmx.net> Co-authored-by: Sampson <jjdsampson@gmail.com> Co-authored-by: Ben Bucksch <1907525+benbucksch@users.noreply.github.com> Co-authored-by: James Westman <james@jwestman.net> Co-authored-by: Wes <5124946+wesinator@users.noreply.github.com> Co-authored-by: Demian <66160623+denik1981@users.noreply.github.com> Co-authored-by: Ryan Johnson <rjohnson@mozilla.com> Co-authored-by: Shubham Chaturvedi <19shubham11@gmail.com> Co-authored-by: Chris Peterson <cpeterson@mozilla.com> Co-authored-by: Masahiro FUJIMOTO <mfujimot@gmail.com> Co-authored-by: Ashraf Nazar <ashraf.caspian@gmail.com> Co-authored-by: pooya Games <426713+pooyaEst@users.noreply.github.com> Co-authored-by: André Jaenisch <Ryuno-Ki@users.noreply.github.com> Co-authored-by: Vitaly Zdanevich <zdanevich.vitaly@ya.ru> Co-authored-by: Germain <germain@souquet.com> Co-authored-by: Emily Stewart <emilypstewart@gmail.com> Co-authored-by: Kenneth Lum <kenneth.kin.lum@gmail.com> Co-authored-by: Carlin Kartchner <carlinsjunk2@gmail.com> Co-authored-by: Yoshiya Hinosawa <stibium121@gmail.com> Co-authored-by: jchimene <jeff@systasis.co> Co-authored-by: Dominique Hazael-Massieux <dom@w3.org> Co-authored-by: Victor Westerlund <victor.vesterlund@gmail.com> Co-authored-by: Daniel Libby <dlibby@microsoft.com> Co-authored-by: Halvard Vegum <30663324+Havegum@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
As of this change, any touch of any index.html that introduces something that's supposedly "unsafe" should crash CI.