-
Notifications
You must be signed in to change notification settings - Fork 8
/
Copy pathCSP-ja.html
6809 lines (6075 loc) · 238 KB
/
CSP-ja.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<!DOCTYPE html><html lang="ja"><head><meta charset="utf-8">
<title>Content Security Policy （日本語訳）</title>
<link rel="stylesheet" href="common.css" type="text/css">
<link rel="stylesheet" href="common-w3c.css" type="text/css">
<style>
div.p {
margin-bottom: 1.5em;
margin-top: 1.5em;
}
.report {
color: var(--text-color-2);
}
.sandboxing {
color: var(--text-color-2);
}
samp {
white-space: nowrap;
background: var(--bg-color-1);
margin-left: 0.5em;
margin-right: 0.5em;
}
#_relationships td,
#_relationships th {
border: thin solid var(--N-color);
}
</style>
<script src="common0.js"></script>
<script src="common1.js" async></script>
<!--%script -->
<script>
Util.ready = function(){
const source_data = {
toc_main: 'MAIN0',
generate: expand,
};
Util.switchWordsInit(source_data);
}
function expand(){
const class_map = this.class_map;
const tag_map = this.tag_map;
const link_map = this.link_map;
let idl_context = '';
return this.html.replace(
/%[\w\-~一-鿆あ-ん]+|`(.*?)([$@^])(\w*)/g,
create_html
);
function create_html(match, key, indicator, klass){
if(!indicator) {//%
return `<var>${match.slice(1)}</var>`;
}
let href = '';
let href1 = '';
{
const n = key.indexOf('＠');
if(n > 0) {
href1 = key.slice(n + 1);
key = key.slice(0, n);
}
}
let text = key;
switch(klass){
case 'x': // plain
break;
case 'r':
text = `[${key}]`;
href = `#biblio-${key.toLowerCase()}`;
break;
case 'P': // protocol 要素
case 'p': // protocol 要素
case 'dir': // 指令
href = href || '#' + key.replace(/-/g, '_');
break;
case 'sec':
text = ` § ${text}`;
break;
case 'at':
text = `@${key}`;
break;
case 'I':
if( indicator === '@') {
idl_context = `#dom-${key}-`;
}
break;
case 'm':
href = href || (idl_context + key).toLowerCase();
break;
case 'vr': // 違反報告 field
href = href || `#violation-report-${key}`;
break;
case 'lt':
text = `"<code class="literal">${text}</code>"`;
break;
case 'pl': //protocol literal
text = `'${text}'`;
break;
}
let tag = tag_map[klass];
if(tag) {
let classname = class_map[klass];
classname = classname ? ` class="${classname}"` : '';
text = `<${tag}${classname}>${text}</${tag}>`;
}
if(indicator !== '^'){
href = href1 || link_map[ klass ? `${klass}.${key}` : key ] || href;
if(!href){
console.log(match); // check error
return match;
}
switch(indicator){
case '$':
text = `<a href="${href}">${text}</a>`;
break;
case '@':
text = `<dfn id="${href.slice(1)}">${text}</dfn>`;
break;
}
}
return text;
}
}
</script>
<script type="text/plain" id="_source_data">
●●options
spec_date:2016-12-15
trans_update:2017-03-06
source_checked:161215
page_state_key:WEBAPPSEC
original_url:https://www.w3.org/TR/CSP2/
spec_status:REC
ref_id_prefix:biblio-
ref_id_lowercase:true
conformance:w3c
copyright:2016,use
trans_1st_pub:2015-03-25
●●class_map
p:production
P:production
dir:directive
h:header
e:element
a:attr
I:idl
E:error
m:idl
et:event-type
sc:scheme
at:css
f:css
fl:sandboxing
vr:report
pl:literal
●●tag_map
p:var
P:code
dir:code
h:code
css:code
sc:code
e:code
a:code
E:code
I:code
m:code
et:code
at:code
f:code
vr:code
c:code
s:samp
pl:code
fl:code
i:i
em:em
●●words_table
XSS:cross-site scripting:XSS
GUID:
IP:
IPv4:
IPv6:
JavaScript:
PDF:
XSLT:
CSP:Content Security Policy
Alice:::アリス
Bob:::ボブ
CR
CSP2
DOM
ECMAScript
Flash
JPG
Level
Model
Note
Object
POST
Same-Origin Policy
Worker
Shared Worker
Service Worker
TLS
SHA-256
SHA-384
SHA-512
SOLIDUS
SEMICOLON
COMMA
ASTERISK
FULLSTOP
STOP
SOLIDUS
^en:UI Redressing
WOFF:
Web:
WebFont:
Worker:
base64::
ahead::
anywhere::
●制約対象
活動:activities::~
~基底
child::::子
接続~target
~font
frame化され:framed
再~frame化:re-frame
iframe-srcdoc:iframe srcdoc
clip::::クリップ
track::::トラック
out-of-line::::アウトオブライン
timer::::タイマー
webfont::::web フォント
埋込可能:embed 可能::埋込み可能
一環:course:~
外部~化:externalize
●保安施策
hash:::::ハッシュ
signature:::::シグネチャ
nonce:::::ナンス
pragma:::::プラグマ
sources::::ソース
stylesheet:style sheet
whitelist::::ホワイトリスト
digest::::ダイジェスト
施行:enforcing::~
施行n:enforcement::施行
source list指令: list-style directive
報告ng:reporting::報告
運用者:operator:~
運用:operating:~
管理-:-
管理v:administrative::管理
管理者:administrator:~
式:expression::~
式-:expression-::式-
行番号:line number::~
列番号:column number::~
数値:number:~
事前宣言:predeclaration:~
給-:supply:~
合格-:pass:~
●攻撃／保安
乱数:random number:~
firewall::::ファイアウォール
探査-:probe:~
警告:warning:~
迂回-:bypass:~
前線防御:first line of defense:~
多層防御:defense in depth:~
防御-:defend::~
特権:privilege::~
特質:property:~:::プロパティ
抑制:reduction::~
暗号的:cryptographic::~
許容:allowed:~
被る:incurする:~
被害:harm:~
詐欺的な:fraudulent:~
騙す:trickする:~
騙せる:trickできる:~
突破る:突き破る
突き破る:usurp
推測-:guess:~
盗聴:eavesdropping:~
無毒化-:sanitize:~
公開0:disclosing:公開
緩い:laxな:~
奪えな:usurpできな:~
弱い:weakな:~
面:surface::~
疑義:suspect:~
brute-forcing-path:brute-forcing path::総当たり攻撃::ブルートフォース攻撃
不正転送:exfiltration:~
緩める:looseにする:~
^en:clickjacking
安全でない:unsafe
粗くする
誘う道:tempting avenue
sniffing-mitigation
privilege-reduction
信用-済み:trusted
他では信用に価する:otherwise trustworthy
信用できない:untrusted
抗:against
●network
directory::::ディレクトリ
子孫directory:subdirectories:::子孫ディレクトリ:サブディレクトリ
致命的:fatal::~
prefetch:~
~fetch用の:~fetching
gateway::::ゲートウェイ
hostname::::ホスト名
identity:
provider::::プロバイダ
log-in::::ログイン
為す:makeする:~
online::::オンライン
beacon::::ビーコン
ping:
~web~site:website
^vr:status
payload::::ペイロード
entity
送受信-:send or receive::~
端点:endpoint::~
端点間:end-to-end::~
開な:open::開いた
開く:openする::~
開かれ:openされ::~
双方向-:bidirectional::~
上流の:upstream::~
分散型:distribution:~
social::::ソーシャル
共有:sharing::~
権限:authority:~
認証:
大域一意:globally unique::~
●仕様
方法論:algorithm::~
検討-:consider:~
今や:now:~
代案:alternate-proposal:~
妥協点:compromise:~
遂行:performing:~
寛容:permissive:~
古い:old:~
恒久的:permanent:~
理想的:ideal:~
適応-:accommodate:~
採択:opt into:::::オプトイン
最適化されたoptimistic::
指す:referする:~
整合であ:consistentであ:整合してい
既に:already:すでに
複雑化-:complicate:~
複雑化:complication:~
締結-:conclude:決定
関心:interest:~
単直:straightforward:簡単
築上げる:build upする:築き上げる
発展:evolution:~
移行:migration:~
追加機能:additions:~
伝える:informする:~
健全:sane:~
不可能:impossible:~
充足-:satisfy:~
満足-:satisfy:~
利点:advantage:~
大多数:majority:~
役立つ:beneficialである:~
機能不全:malfunction:~
無傷で:unscathedに:~
粒度:granularity:~
組織:organization:~
組織-:organizational:~
統一的:uniform:~
置換える:replaceする:置き換える
自明:trivial:~
見かけ:look:~
見積もり:estimate:~
誂えら:tailorさ:あつらえら
執行され:undertakeされ:執り行われ
需要:demand:~
顧客:customer:~
選択肢:option:~
馴染易い:friendlyな:わかり易い
失墜-:discredit:~
予期せず:unexpected
punt:::先送り
洞察:insight:~
仕事:work:~
確信でき:confidence が得られ:~
理想:wonderful:~
享受-:reap:~
成文化-:codify:~
洞察:insight:~
洞察に富む:insightful
早期の:early
すくい取る:skim through
間違ってる:wrong
ものとされるべき:ought
ごく:very
何故なら:because
大きく改善する:provide a substantial improvement over
上手く:well-
とは言え、That said
~~発する:issue
はっきりしない:unclear
~appに利するため:on your behalf
~site作者:you
デモる:demonstrateする:~
基づいて:basis
枠内に絞る:down to lock
課す:imposeする
~~任意:whenever they like
編集者:I
術がない:cannot
主要な:key
を請け負う:responsible
見える:seems
答え:short answer
助け:helpful
満たされ:met
満たす:meet
満たされ:true
ほぼ／およそ:certainly
きれいに:clean
やや:bit
絞り込:intersect
~~主な:major
相違:difference
work
working group
deal
noting
enough:までもない
potential
potentially
please
言って:speaking
再掲:repetition
再掲-:repeat
想定以上に
●HTML／DOM／IDL／CSS
強制d:forced::強制
渡-:pass:~
演算子:operator:~
名前を持つ:named
●構文／文字列処理
ACI:<sub>大小無視</sub>
-:space
percent-::: %-
読飛ばす:skipする:読み飛ばす
剥ぐ:stripする:~
剥いだ:stripした:~
尾部:trailing:~
引用符:quotation mark:~
区切られ:delimitされ:~
合致0:does match::合致する::マッチする
非合致:does not match::合致しない::マッチしない
wildcard::::ワイルドカード
印字可能:printing:~
英字:letters:~
十進数:decimal:数字
並び:sequence
文字列~化:stringification
前後の
●未分類
attachment:::添付データ
auction::::オークション
銀行:banking:~
bookmarklet::::ブックマークレット
聴取-:audit::~
auditing
callable:
command-line::::コマンドライン
e-mail::::メール
解消:eliminate:~
最終的な:final:~
許可付きの:permissioned::~
部署:team:~
事業者:merchant:~
転開-:roll out:展開
先行-:preceed:~
処理指令:
出現-:appear:~
-:occurrence:出現
出自に:originate:~
全般の:overall:~
有効:effective:~
反復的:iterative:~
和集合:union:~
履行-:fulfil:~
巨大な:large:~
広範な:broad:~
拡大-:expand:~
掲示板:message-board:~
支払い:payment:~
新規0:fresh:新規
新品の:brand new
optimistic
欠く:lackする:~
欠いて:lackして:~
残りの:remaining:~
稼働-:run:~
競う:competeする:~
終端-:end:~
end with
部品:component:~
量:amount:~
高速化-:speed-up:~
節:section:~
手渡され:handされ:~
含む:includeする:~
含ませ:includeさせ:~
含まれ:includeされ:~
含める:includeする:~
含めて:includeして:~
含めら:includeさ:~
含めな:includeしな:~
異なる:differentな:~
形
以前の:previous:~
比較的長い
保たせ
小さく:small
同じく:just as
属する
continue
正確~合致-:exact-match
式~path-list:source-expression-path-list
path-part
始-:begin
-:pop 〜 off
得:gain
来ている:coming
~~供する~serve
片:fragment／piece
pass-through
~~指して:point
-:remain
put
ごく:quite
rest
url:url
time
数:number
●指示語
around
前者:initial
示す:imply
内:inside
始めの方:early
各種:various
次のように:as follows
~~任意:whenever they like
下:under
外方への:outgoing
一部:subset
一部:part
幾千もの:hundreds or thousands
直の:immediate
超える:above and beyond
末尾側の文字列:rightmost characters
thing
~~最後の:final
portion
nothing
●●original_id_map
default-source-list:
restrict-activities:
allowed-sources:
ascii-case_insensitive:
element-attrdef-nonce:
any-source:
●●mdn_urls
content_security_policy:HTTP/Headers/Content-Security-Policy
content_security_policy_report_only:HTTP/Headers/Content-Security-Policy-Report-Only
base_uri:HTTP/Headers/Content-Security-Policy/base-uri
child_src:HTTP/Headers/Content-Security-Policy/child-src
connect_src:HTTP/Headers/Content-Security-Policy/connect-src
default_src:HTTP/Headers/Content-Security-Policy/default-src
font_src:HTTP/Headers/Content-Security-Policy/font-src
form_action:HTTP/Headers/Content-Security-Policy/form-action
frame_ancestors:HTTP/Headers/Content-Security-Policy/frame-ancestors
frame_src:HTTP/Headers/Content-Security-Policy/frame-src
img_src:HTTP/Headers/Content-Security-Policy/img-src
media_src:HTTP/Headers/Content-Security-Policy/media-src
object_src:HTTP/Headers/Content-Security-Policy/object-src
plugin_types:HTTP/Headers/Content-Security-Policy/plugin-types
sandbox:HTTP/Headers/Content-Security-Policy/sandbox
script_src:HTTP/Headers/Content-Security-Policy/script-src
style_src:HTTP/Headers/Content-Security-Policy/style-src
report_uri:HTTP/Headers/Content-Security-Policy/report-uri
securitypolicyviolationevent:API/SecurityPolicyViolationEvent
dictdef-securitypolicyviolationeventinit:API/SecurityPolicyViolationEventInit
●●words_table1
RFC6454:RFC6454-ja.html
RFC7230:RFC7230-ja.html
RFC7231:RFC7231-ja.html
SEMICOLON: U+003B SEMICOLON (<code>;</code>)
COMMA: U+002C COMMA (<code>,</code>)
ASTERISK: U+002A ASTERISK (<code>*</code>)
FULLSTOP: U+002E FULL STOP (<code>.</code>)
SOLIDUS: U+002F SOLIDUS (<code>/</code>)
must:なければならない
meta:<code class="element">meta</code>
referrer0:referrer
●●link_map
●protocol 要素
p.directive-name:#directive_name
p.directive-token:#directive_token
p.directive-value:#directive_value
p.hash-algo:#hash_algo
p.hash-source:#hash_source
p.hash-value:#hash_value
p.host-char:#host_char
p.host-part:#host_part
p.host-source:#host_source
p.ancestor-source:#ancestor_source
p.ancestor-source-list:#ancestor_source_list
p.base64-value:#base64_value
p.keyword-source:#keyword_source
p.media-type:#media_type
p.media-type-list:#media_type_list
p.nonce-source:#nonce_source
p.nonce-value:#nonce_value
p.path-part:#path_part
p.policy-token:#policy_token
p.port-part:#port_part
p.sandbox-token:#sandbox_token
p.scheme-part:#scheme_part
p.scheme-source:#scheme_source
p.source-expression:#source_expression
p.uri-reference:#uri_reference
p.csp-header-value:#csp_header_value
p.scheme:~RFCx/rfc3986#section-3.1
p.path:~RFCx/rfc3986#section-3.3
P.DIGIT:#alpha
P.ALPHA:#digit
P.VCHAR:#vchar
P.WSP:#wsp
p.#rule:~RFC7230#section-7
p.IPv4address:~RFCx/rfc3986#section-3.2.2
●指令
dir.base-uri:#base_uri
dir.child-src:#child_src
dir.connect-src:#connect_src
dir.default-src:#default_src
dir.font-src:#font_src
dir.form-action:#form_action
dir.frame-ancestors:#frame_ancestors
dir.frame-src:#frame_src
dir.img-src:#img_src
CSP3＊dir.manifest-src:#manifest_src
dir.media-src:#media_src
dir.object-src:#object_src
dir.plugin-types:#plugin_types
dir.sandbox:#sandbox
dir.script-src:#script_src
dir.style-src:#style_src
CSP3＊dir.reflected-xss:#reflected_xss
dir.report-uri:#report_uri
●dfn
許容~基底~URL:#allowed-base-urls
許容~child~sources:#allowed-child-sources
許容~接続~target:#allowed-connection-targets
許容~font~sources:#allowed-font-sources
許容~form動作:#allowed-form-actions
許容~frame先祖:#allowed-frame-ancestors
許容~frame~sources:#allowed-frame-sources
許容~画像~sources:#allowed-image-sources
許容~media~sources:#allowed-media-sources
許容~obj~sources:#allowed-object-sources
許容~plugin~MIME型:#allowed-plugin-media-types
許容~script~sources:#allowed-script-sources
許容~style~sources:#allowed-style-sources
違反~eventを発火する:#fire-a-violation-event
違反~報告~objを生成-:#generate-a-violation-report-object
違反~報告~obj:#generate-a-violation-report-object
~MIME型~listに合致-:#match-a-media-type-list
~source式に合致-:#match-a-source-expression
~source~listに合致#match-a-source-list
合致する:#match-a-source-list
合致し:#match-a-source-list
~MIME型:#media-type
~MIME型~list:#media-type-list
~MIME型~listとして構文解析-:#parse-a-media-type-list
~source~listとして構文解析-:#parse-a-source-list
施策として構文解析-:#parse-the-policy
保護される資源:#protected-resource
違反を報告-:#report-a-violation
生成されて報告される:#report-a-violation
施策:#security-policy
~security施策:#security-policy
~security施策 指令:#security-policy-directive
~security施策 指令~名:#security-policy-directive-name
~security施策 指令~値:#security-policy-directive-value
指令:#security-policy-directive
指令~名:#security-policy-directive-name
指令~値:#security-policy-directive-value
違反~報告を送信する:#send-violation-reports
報告~URL:#set-of-report-urls
~source式:#source-expression
報告~用に剥ぐ:#strip-uri-for-reporting
報告~用に剥いだ:#strip-uri-for-reporting
妥当な~hash:#valid-hash
妥当な~nonce:#valid-nonce
既定の~sources:#default-sources
既定の~source~list:#default-source-list
内容~digest:#digest-of-elements-content
内容の~binary~digest:#digest-of-elements-content
指令~名:#security-policy-directive-name
指令~値:#security-policy-directive-value
要素~内容:#elements-content
施行:#enforce
施行-:#enforce
監視:#monitor
監視-:#monitor
適合t~server:#conformant-server
適合t~UA:#conformant-user-agent
~CSP~task~source:#content-security-policy-task-source
許容~sources:#allowed-sources
ANY:#any-source
●idl
I.SecurityPolicy:#securitypolicy
I.SecurityPolicyDirective:#securitypolicydirective
I.SecurityPolicyHashAlgorithm:#enumdef-securitypolicyhashalgorithm
I.SecurityPolicyMode:#enumdef-securitypolicymode
I.SecurityPolicySource:#securitypolicysource
I.SecurityPolicySourceHash:#securitypolicysourcehash
I.SecurityPolicySourceListDirective:#securitypolicysourcelistdirective
I.SecurityPolicySourceNonce:#securitypolicysourcenonce
I.SecurityPolicySourceURL:#securitypolicysourceurl
I.SecurityPolicyViolationEvent:#securitypolicyviolationevent
I.SecurityPolicyViolationEventInit:#dictdef-securitypolicyviolationeventinit
I.Document:~DOM4#interface-document
I.Event:~DOM4#event
I.EventInit:~DOM4#eventinit
I.HTMLScriptElement:~HEscripting#htmlscriptelement
~HTML50/scripting-1.html#htmlscriptelement
I.HTMLStyleElement:~HEmetadata#htmlstyleelement
I.Node:~DOM4#interface-node
I.Request:~FETCH#request
I.URL:~URL1#dom-url
I.DOMString:~WEBIDL#idl-DOMString
I.long:~WEBIDL#idl-long
E.SecurityError:~WEBIDL#securityerror
E.EvalError
I.WebSocket:~WEBSOCKET#websocket
http://dev.w3.org/html5/websockets/#websocket
I.EventSource:~HTMLsse#eventsource
http://dev.w3.org/html5/eventsource/#eventsource
I.XMLHttpRequest:~XHR#xmlhttprequest
補完
I.Worker:~WORKERS#worker
I.SharedWorker:~WORKERS#sharedworker
I.WorkerGlobalScope:~WORKERS#workerglobalscope
●dom
m.setInterval():~HTMLGAPI#dom-setinterval
~HTML50/webappapis.html#dom-windowtimers-setinterval
m.setTimeout():~HTMLGAPI#dom-setinterval
~HTML50/webappapis.html#dom-windowtimers-settimeout
m.~referrer0:~HTMLdom#dom-document-referrer
~HTML50/dom.html#dom-document-referrer
m.textContent:~DOM4#dom-node-textcontent
m.send():~XHR#the-send()-method
~TR/XMLHttpRequest/#the-send()-method
m.sendBeacon():~TR/beacon/#sec-sendBeacon-method
m.archive:~HTMLLS/obsolete.html#dom-object-archive
~HTML50/obsolete.html#dom-htmlappletelement-archive
m.code:~HTMLLS/obsolete.html#dom-object-code
~HTML50/obsolete.html#dom-htmlappletelement-code
●flags
fl.allow-forms:~ORIGIN#attr-iframe-sandbox-allow-forms
fl.allow-pointer-lock:~ORIGIN#attr-iframe-sandbox-allow-pointer-lock
fl.allow-popups:~ORIGIN#attr-iframe-sandbox-allow-popups
fl.allow-same-origin:~ORIGIN#attr-iframe-sandbox-allow-same-origin
fl.allow-scripts:~ORIGIN#attr-iframe-sandbox-allow-scripts
fl.allow-top-navigation:~ORIGIN#attr-iframe-sandbox-allow-top-navigation
●内容属性
a.content:~HEmetadata#attr-meta-content
a.data:~HEembed#attr-object-data
~HTML50/embedded-content-0.html#attr-object-data
a.href:~HEmetadata#attr-link-href
a.http-equiv:~HEmetadata#attr-meta-http-equiv
a.poster:~HEmedia#attr-video-poster
~HTML50/embedded-content-0.html#attr-video-poster
a.rel:~HEmetadata#attr-link-rel
a.sandbox:~HEembed#attr-iframe-sandbox
~HTML50/embedded-content-0.html#attr-iframe-sandbox
a.src:~HTML50/embedded-content-0.html#attr-img-src
a.src:~HTML50/embedded-content-0.html#attr-embed-src
a.src:~HTML50/embedded-content-0.html#attr-media-src
a.src:~HEinput#attr-input-src
a.src:~HTML50/scripting-1.html#attr-script-src
a.srcdoc:~HEembed#attr-iframe-srcdoc
~HTML50/embedded-content-0.html#attr-iframe-srcdoc
a.type:~HEembed#attr-object-type
~HTML50/embedded-content-0.html#attr-object-type
a.nonce:#element-attrdef-nonce
a.srcset？
element-attr for script:#element-attrdef-script-nonce
element-attr for style:#element-attrdef-style-nonce
a.type="image":~HEinput#attr-input-type-image-keyword
●要素
e.applet:~HTMLobs#applet
~HTML50
e.audio:~HEmedia#the-audio-element
~HTML50/embedded-content-0.html#the-audio-element
e.embed:~HEembed#the-embed-element
~HTML50/embedded-content-0.html#the-embed-element
e.form:~HEforms#the-form-element
e.head:~HEmetadata#the-head-element
v.icon:~HTMLlinks#rel-icon
~HTML50/document-metadata.html#rel-icon
e.iframe:~HEembed#the-iframe-element
~HTML50/embedded-content-0.html#the-iframe-element
e.img:~HEimages#the-img-element
e.img:~HTML50/embedded-content-0.html#the-img-element
e.input:~HEinput#the-input-element
e.link:~HEmetadata#the-link-element
e.meta:~HEmetadata#the-meta-element
e.object:~HEembed#the-object-element
~HTML50/embedded-content-0.html#the-object-element
e.script:~HEscripting#the-script-element
~HTML50/scripting-1.html#the-script-element
e.source:~HEimages#the-source-element
~HTML50/embedded-content-0.html#the-source-element
e.style:~HEmetadata#the-style-element
e.track:~HEtrack#the-track-element
~HTML50/embedded-content-0.html#the-track-element
e.video:~HEmedia#the-video-element
~HTML50/embedded-content-0.html#the-video-element
e.frame:~HTMLobs#frame
~HTML50
e.svg:~SVGstruct#elementdef-svg
●CSS
at.font-face:~CSSFONT#at-font-face-rule
~CSSWG/css-fonts-3/#at-font-face-rule
at.import:~CASCADE#at-ruledef-import
f.image():~CSSIMAGE4#funcdef-image
f.image-set():~CSSIMAGE#funcdef-image-set
追補
f.url():~CSSIMAGE#url-notation
●HTTP header
h.Content-Security-Policy:#content_security_policy
h.Content-Security-Policy-Report-Only:#content_security_policy_report_only
CSP3＊h.CSP:#csp
h.Link:~HTTPweblink#field.link
h.Link:~RFCx/rfc5988#section-5
h.X-Frame-Options:~RFCx/rfc7034#section-2
●§
sec.施策の送達:#policy-delivery
sec.3.1:#content-security-policy-header-field
`Content-Security-Policy^h ~header
sec.3.2:#content-security-policy-report-only-header-field
`Content-Security-Policy-Report-Only^h ~header
sec.~meta要素:#delivery-html-meta-element
sec.3.4:#csp-request-header
sec.複数の施策の施行-法:#enforcing-multiple-policies
sec.施策の適用能:#which-policy-applies
sec.構文と~algo:#syntax-and-algorithms
sec.施策の構文解析-法:#policy-parsing
sec.~source式の照合-法:#match-source-expression
sec.~GUID~URL~scheme:#source-list-guid-matching
sec.~pathの照合-法:#source-list-path-patching
sec.~pathと~redirect:#source-list-paths-and-redirects
sec.妥当な~nonce:#source-list-valid-nonces
sec.妥当な~hash:#source-list-valid-hashes
sec.報告-法:#violation-reports
sec.~worker:#processing-model-workers
sec.違反~eventの発火-法:#firing-securitypolicyviolationevent-events
sec.指令:#directives
sec.入子な閲覧~文脈:#directive-child-src-nested
sec.~sandbox法と~worker:#sandboxing-and-workers
sec.~nonceの用法:#script-src-nonce-usage
sec.~hashの用法:#script-src-hash-usage
sec.処理の複雑化:#complications
用語（外部仕様）
大域一意~識別子:#globally-unique-identifier
~GUID:#globally-unique-identifier
~HTTP 200 応答:#http-200-response
~JSON~obj:#json-object
~JSON文字列~化:#json-stringification
生成元:#origin
資源~表現:#resource-representation
表現:#resource-representation
SHA-256:#sha_256
SHA-384:#sha_384
SHA-512:#sha_512
~URL:#url
runs a worker:#run-a-worker
callable:#callable
callers:#callers
~ACI:#ascii-case_insensitive
●外部 dfn
状態s~code:~RFC7231#section-6
~eventを発火する:~DOM4#concept-event-fire
~ASCII大小無視:~INFRA#ascii-case-insensitive
符号位置~並びを収集する:~INFRA#collect-a-sequence-of-code-points
区切子で厳密に分割する:~INFRA#strictly-split