diff --git a/.vscode/dictionaries/code-entities.txt b/.vscode/dictionaries/code-entities.txt index aeaed2ab3fd0c50..130887e71dfba34 100644 --- a/.vscode/dictionaries/code-entities.txt +++ b/.vscode/dictionaries/code-entities.txt @@ -392,6 +392,7 @@ mathbold mathdbl mathit mathml +mathml.stixgeneral_operator_stretching.disabled mathmlref mathmono mathrm diff --git a/.vscode/dictionaries/proper-names.txt b/.vscode/dictionaries/proper-names.txt index 3a0d3a9861de195..ede18e37ca5e085 100644 --- a/.vscode/dictionaries/proper-names.txt +++ b/.vscode/dictionaries/proper-names.txt @@ -372,6 +372,7 @@ McLellan McNally McVerry Megalosaurus +Menard Mercure Merkle mfuji diff --git a/.vscode/dictionaries/terms-abbreviations.txt b/.vscode/dictionaries/terms-abbreviations.txt index e1da6b48d8fd7e5..ad04ec2001c292f 100644 --- a/.vscode/dictionaries/terms-abbreviations.txt +++ b/.vscode/dictionaries/terms-abbreviations.txt @@ -175,6 +175,7 @@ discardable distros DLRR DLSR +DMARC docshell docshells doctypes @@ -792,6 +793,7 @@ TIPC toggletips toolkits toolsets +TOTP touchpads touchpoint touchpoints diff --git a/files/en-us/learn_web_development/extensions/forms/styling_web_forms/index.md b/files/en-us/learn_web_development/extensions/forms/styling_web_forms/index.md index 0278419a00539d2..5b316d80f848a13 100644 --- a/files/en-us/learn_web_development/extensions/forms/styling_web_forms/index.md +++ b/files/en-us/learn_web_development/extensions/forms/styling_web_forms/index.md @@ -186,8 +186,8 @@ Take the following example:
  • - - + +
    • diff --git a/files/en-us/web/api/htmlscriptelement/text/index.md b/files/en-us/web/api/htmlscriptelement/text/index.md index 0f41c68750b36a6..263acd915530f20 100644 --- a/files/en-us/web/api/htmlscriptelement/text/index.md +++ b/files/en-us/web/api/htmlscriptelement/text/index.md @@ -18,8 +18,6 @@ browser-compat: api.HTMLScriptElement.text The **`text`** property of the {{domxref("HTMLScriptElement")}} interface represents the inline text content of the script element. It acts the same way as the {{domxref("HTMLScriptElement.textContent","textContent")}} property. -It reflects the `text` attribute of the {{HTMLElement("script")}} element. - ## Value Getting the property returns a string containing the element's text. @@ -81,12 +79,12 @@ For the purpose of this example we'll allow just exactly the script that we need ```js const policy = trustedTypes.createPolicy("inline-script-policy", { - createScript: (input) => { + createScript(input) { // Here specify what scripts are safe to allow if (input === "const num = 10;\nconsole.log(num)") { return input; // allow this exact script } - throw new TypeError("Untrusted script blocked: " + input); + throw new TypeError(`Untrusted script blocked: ${input}`); }, }); ``` @@ -123,7 +121,7 @@ Note that in this case we're not using the policy to create trusted scripts (for ```js // Set the text property -let el.text = "const num = 10;\nconsole.log(num)"; +el.text = "const num = 10;\nconsole.log(num)"; console.log(el.text); // Output: "const num = 10;\nconsole.log(num);" console.log(el.textContent); // Output: "const num = 10;\nconsole.log(num);" diff --git a/files/en-us/web/api/rtcdtlstransport/error_event/index.md b/files/en-us/web/api/rtcdtlstransport/error_event/index.md index cc0dd743aa88db9..eca2239c2159892 100644 --- a/files/en-us/web/api/rtcdtlstransport/error_event/index.md +++ b/files/en-us/web/api/rtcdtlstransport/error_event/index.md @@ -46,7 +46,7 @@ Transport-level errors will have one of the following values for the specified e ## Examples -In this example, the {{domxref("RTCDtlsTransport.onerror", "onerror")}} event handler property is used to set the handler for the `error` event. +In this example, the `onerror` event handler property is used to set the handler for the `error` event. ```js transport.onerror = (ev) => { diff --git a/files/en-us/web/api/viewport_segments_api/using/index.md b/files/en-us/web/api/viewport_segments_api/using/index.md index 04e25a975522f94..fdc4bd4f1fa6b7d 100644 --- a/files/en-us/web/api/viewport_segments_api/using/index.md +++ b/files/en-us/web/api/viewport_segments_api/using/index.md @@ -12,7 +12,7 @@ This article explains how to use the [Viewport Segments API](/en-US/docs/Web/API Foldable devices include smartphones, tablets, and laptops. Some fold inward, with the display folding into the interior of the device, and some fold outward, with the display wrapping around the device. Foldable devices come in a variety of forms: some have an actual folding screen, whereas some have separate screens with a physical hinge in the middle. They may be used in landscape orientation, with two screens side-by-side, and portrait orientation, with a top and a bottom screen. -Whatever the case, foldable device displays are intended to act as different segments of the same display surface. While one person's foldable device may appear seemless and be used fully flat, similar to a single-segmented viewport, another may have an apparent seam be used at an angle that is less than a fully open, flat screen. This presents some unique challenges. You can optimize your layout for the display as a single entity, but how can you ensure that design elements fit snugly on the different segments and are not cut into two pieces? And how can you prevent content from being hidden by the physical fold/join? +Whatever the case, foldable device displays are intended to act as different segments of the same display surface. While one person's foldable device may appear seamless and be used fully flat, similar to a single-segmented viewport, another may have an apparent seam be used at an angle that is less than a fully open, flat screen. This presents some unique challenges. You can optimize your layout for the display as a single entity, but how can you ensure that design elements fit snugly on the different segments and are not cut into two pieces? And how can you prevent content from being hidden by the physical fold/join? The viewport segments API provides features that allow you to detect (in CSS and JavaScript) whether the user's device screen has a fold or join, what size the different segments are, whether they are the same size, and what orientation they are in (side-by-side or top-to-bottom). We'll introduce you to these features in the following sections, then walk through a complete example to show them in action. diff --git a/files/en-us/web/css/filter-function/invert/index.md b/files/en-us/web/css/filter-function/invert/index.md index 49664f83793d243..9cc61c9c1c224e5 100644 --- a/files/en-us/web/css/filter-function/invert/index.md +++ b/files/en-us/web/css/filter-function/invert/index.md @@ -145,12 +145,11 @@ We include CSS that will invert elements based on their `filter` or `svgFilter` - - - + + + -

    Prose of the century

    - I'm baby xOXO bespoke cupidatat PBR&B, affogato cronut 3 wolf moon ea - narwhal asymmetrical. Af health goth shaman in slow-carb godard echo park. - Tofu farm-to-table labore salvia tote bag food truck dolore gluten-free - poutine kombucha fanny pack +1 franzen lyft fugiat. Chicharrones next level - jianbing, enamel pin seitan cardigan bruh snackwave beard incididunt dolor - lumbersexual before they sold out dreamcatcher single-origin coffee. + Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla luctus + aliquam dolor, eu lacinia lorem placerat vulputate. Duis felis orci, + pulvinar id metus ut, rutrum luctus orci. Cras porttitor imperdiet nunc, at + ultricies tellus laoreet sit amet.

    @@ -111,92 +109,87 @@ Our markup has a series of {{htmlelement("section")}} elements containing conten

    My story

    - I'm baby xOXO bespoke cupidatat PBR&B, affogato cronut 3 wolf moon ea - narwhal asymmetrical. Af health goth shaman in slow-carb godard echo park. - Tofu farm-to-table labore salvia tote bag food truck dolore gluten-free - poutine kombucha fanny pack +1 franzen lyft fugiat. Chicharrones next level - jianbing, enamel pin seitan cardigan bruh snackwave beard incididunt dolor - lumbersexual before they sold out dreamcatcher single-origin coffee. + Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla luctus + aliquam dolor, eu lacinia lorem placerat vulputate. Duis felis orci, + pulvinar id metus ut, rutrum luctus orci. Cras porttitor imperdiet nunc, at + ultricies tellus laoreet sit amet.

    Chapter 1

    - I'm baby xOXO bespoke cupidatat PBR&B, affogato cronut 3 wolf moon ea - narwhal asymmetrical. Af health goth shaman in slow-carb godard echo park. - Tofu farm-to-table labore salvia tote bag food truck dolore gluten-free - poutine kombucha fanny pack +1 franzen lyft fugiat. Chicharrones next level - jianbing, enamel pin seitan cardigan bruh snackwave beard incididunt dolor - lumbersexual before they sold out dreamcatcher single-origin coffee. + Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla luctus + aliquam dolor, eu lacinia lorem placerat vulputate. Duis felis orci, + pulvinar id metus ut, rutrum luctus orci. Cras porttitor imperdiet nunc, at + ultricies tellus laoreet sit amet.

    - Kombucha laborum tempor iceland pour-over. Keytar in echo park gorpcore - bespoke. Art party quinoa stumptown celiac, sed chillwave 3 wolf moon. - Scenester fugiat pariatur, seitan selvage excepteur chambray yuccie artisan. - Sunt schlitz ugh, et jawn sus four loko pop-up post-ironic photo booth - occaecat deep v 8-bit tacos marfa. Tattooed ipsum tbh occaecat umami four - loko adaptogen taiyaki truffaut hexagon neutral milk hotel. + Sed auctor cursus massa at porta. Integer ligula ipsum, tristique sit amet + orci vel, viverra egestas ligula. Curabitur vehicula tellus neque, ac ornare + ex malesuada et. In vitae convallis lacus. Aliquam erat volutpat. + Suspendisse ac imperdiet turpis. Aenean finibus sollicitudin eros pharetra + congue. Duis ornare egestas augue ut luctus. Proin blandit quam nec lacus + varius commodo et a urna. Ut id ornare felis, eget fermentum sapien.

    - Austin mukbang scenester pabst, kale chips helvetica in selvage tote bag - drinking vinegar craft beer pickled meh subway tile +1. Big mood kogi blog, - vape hella seitan veniam. + Nam vulputate diam nec tempor bibendum. Donec luctus augue eget malesuada + ultrices. Phasellus turpis est, posuere sit amet dapibus ut, facilisis sed + est. Nam id risus quis ante semper consectetur eget aliquam lorem. Vivamus + tristique elit dolor, sed pretium metus suscipit vel. Mauris ultricies + lectus sed lobortis finibus. Vivamus eu urna eget velit cursus viverra quis + vestibulum sem. Aliquam tincidunt eget purus in interdum. Cum sociis natoque + penatibus et magnis dis parturient montes, nascetur ridiculus mus.

    Chapter 2

    - Kombucha laborum tempor iceland pour-over. Keytar in echo park gorpcore - bespoke. Art party quinoa stumptown celiac, sed chillwave 3 wolf moon. - Scenester fugiat pariatur, seitan selvage excepteur chambray yuccie artisan. - Sunt schlitz ugh, et jawn sus four loko pop-up post-ironic photo booth - occaecat deep v 8-bit tacos marfa. Tattooed ipsum tbh occaecat umami four - loko adaptogen taiyaki truffaut hexagon neutral milk hotel. + Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla luctus + aliquam dolor, eu lacinia lorem placerat vulputate. Duis felis orci, + pulvinar id metus ut, rutrum luctus orci. Cras porttitor imperdiet nunc, at + ultricies tellus laoreet sit amet.

    - Chillwave gastropub chartreuse deserunt butcher umami meditation ennui. Sus - post-ironic affogato irony non succulents la croix labore tousled. Tumblr - selvage sartorial taxidermy yes plz fashion axe deserunt. Big mood - humblebrag hammock meditation, four dollar toast vice bruh minim tacos - chartreuse drinking vinegar sunt yes plz YOLO cred. Synth chartreuse est, - wayfarers pop-up ut gorpcore consequat ullamco meh lyft crucifix selvage - occaecat. + Sed auctor cursus massa at porta. Integer ligula ipsum, tristique sit amet + orci vel, viverra egestas ligula. Curabitur vehicula tellus neque, ac ornare + ex malesuada et. In vitae convallis lacus. Aliquam erat volutpat. + Suspendisse ac imperdiet turpis. Aenean finibus sollicitudin eros pharetra + congue. Duis ornare egestas augue ut luctus. Proin blandit quam nec lacus + varius commodo et a urna. Ut id ornare felis, eget fermentum sapien.

    Chapter 3

    - Chillwave gastropub chartreuse deserunt butcher umami meditation ennui. Sus - post-ironic affogato irony non succulents la croix labore tousled. Tumblr - selvage sartorial taxidermy yes plz fashion axe deserunt. Big mood - humblebrag hammock meditation, four dollar toast vice bruh minim tacos - chartreuse drinking vinegar sunt yes plz YOLO cred. Synth chartreuse est, - wayfarers pop-up ut gorpcore consequat ullamco meh lyft crucifix selvage - occaecat. + Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla luctus + aliquam dolor, eu lacinia lorem placerat vulputate. Duis felis orci, + pulvinar id metus ut, rutrum luctus orci. Cras porttitor imperdiet nunc, at + ultricies tellus laoreet sit amet.

    - I'm baby xOXO bespoke cupidatat PBR&B, affogato cronut 3 wolf moon ea - narwhal asymmetrical. Af health goth shaman in slow-carb godard echo park. - Tofu farm-to-table labore salvia tote bag food truck dolore gluten-free - poutine kombucha fanny pack +1 franzen lyft fugiat. Chicharrones next level - jianbing, enamel pin seitan cardigan bruh snackwave beard incididunt dolor - lumbersexual before they sold out dreamcatcher single-origin coffee. + Sed auctor cursus massa at porta. Integer ligula ipsum, tristique sit amet + orci vel, viverra egestas ligula. Curabitur vehicula tellus neque, ac ornare + ex malesuada et. In vitae convallis lacus. Aliquam erat volutpat. + Suspendisse ac imperdiet turpis. Aenean finibus sollicitudin eros pharetra + congue. Duis ornare egestas augue ut luctus. Proin blandit quam nec lacus + varius commodo et a urna. Ut id ornare felis, eget fermentum sapien.

    Chapter 4

    - Austin mukbang scenester pabst, kale chips helvetica in selvage tote bag - drinking vinegar craft beer pickled meh subway tile +1. Big mood kogi blog, - vape hella seitan veniam. + Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla luctus + aliquam dolor, eu lacinia lorem placerat vulputate. Duis felis orci, + pulvinar id metus ut, rutrum luctus orci. Cras porttitor imperdiet nunc, at + ultricies tellus laoreet sit amet.

    - I'm baby xOXO bespoke cupidatat PBR&B, affogato cronut 3 wolf moon ea - narwhal asymmetrical. Af health goth shaman in slow-carb godard echo park. - Tofu farm-to-table labore salvia tote bag food truck dolore gluten-free - poutine kombucha fanny pack +1 franzen lyft fugiat. Chicharrones next level - jianbing, enamel pin seitan cardigan bruh snackwave beard incididunt dolor - lumbersexual before they sold out dreamcatcher single-origin coffee. + Sed auctor cursus massa at porta. Integer ligula ipsum, tristique sit amet + orci vel, viverra egestas ligula. Curabitur vehicula tellus neque, ac ornare + ex malesuada et. In vitae convallis lacus. Aliquam erat volutpat. + Suspendisse ac imperdiet turpis. Aenean finibus sollicitudin eros pharetra + congue. Duis ornare egestas augue ut luctus. Proin blandit quam nec lacus + varius commodo et a urna. Ut id ornare felis, eget fermentum sapien.

    ``` diff --git a/files/en-us/web/security/attacks/phishing/index.md b/files/en-us/web/security/attacks/phishing/index.md index a873752daac1b2c..d57f8df6534b6ef 100644 --- a/files/en-us/web/security/attacks/phishing/index.md +++ b/files/en-us/web/security/attacks/phishing/index.md @@ -24,14 +24,14 @@ Phishing attacks are not dependent on naive or inexperienced users: decades of e ## Defenses -One thing that makes phishing challenging for a website to defend against is that the target site is not involved at all in the attack. It's entirely dependent on the user being tricked by the attacker. In this section we will discuss some practices that can help, but the only one that is really effective is using [passkeys](web_authentication_passkeys) instead of passwords. +One thing that makes phishing challenging for a website to defend against is that the target site is not involved at all in the attack. It's entirely dependent on the user being tricked by the attacker. In this section we will discuss some practices that can help, but the only one that is really effective is using [passkeys](#web_authentication_passkeys) instead of passwords. ### DNS configuration Phishing emails often forge the sender address, to make the victim think that the email really came from the target website. Three {{glossary("DNS")}} records help email servers detect these forgeries, which helps ensure that phishing emails are marked as spam in the victim's email client, or are blocked entirely. - The [Security Policy Framework (SPF)](https://www.cloudflare.com/en-ca/learning/dns/dns-records/dns-spf-record/) record lists addresses that are allowed to send an email from the domain. A receiving email server extracts the domain name from the email's `Return-Path` header, and looks up the SPF record associated with that domain. -- The [DomainKeys Identified Mail (DKIM)](https://www.cloudflare.com/en-ca/learning/dns/dns-records/dns-dkim-record/) record enables the sender to {{glossary("digital signature", "digitally sign")}} emails. The receiving server extracts the domain name from the signature, and uses it to look up looks up the DKIM record associated with that domain. The DKIM record incldues the public key used to verify the signature. The domain name in the signature must also be aligned with the domain name in the email's `From` header (this essentially means that the domain names must match or the value in ther `From` header must be a subdomain of the domain in the signature). +- The [DomainKeys Identified Mail (DKIM)](https://www.cloudflare.com/en-ca/learning/dns/dns-records/dns-dkim-record/) record enables the sender to {{glossary("digital signature", "digitally sign")}} emails. The receiving server extracts the domain name from the signature, and uses it to look up looks up the DKIM record associated with that domain. The DKIM record includes the public key used to verify the signature. The domain name in the signature must also be aligned with the domain name in the email's `From` header (this essentially means that the domain names must match or the value in the `From` header must be a subdomain of the domain in the signature). - The [Domain-based Message Authentication Reporting and Conformance (DMARC)](https://www.cloudflare.com/en-ca/learning/dns/dns-records/dns-dmarc-record/) tells the recipient how to handle SPF and DKIM failures: whether to quarantine them as spam, reject them, or allow them. You should set these DNS records for your domains, to help email servers recognize forged messages.