msgid "" msgstr "" "Project-Id-Version: AiutoComputerHelp HTTP Header Audit 0.3.1\n" "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/aiutocomputerhelp-http-header-audit\n" "POT-Creation-Date: 2026-10-05 08:07+0200\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Domain: aiutocomputerhelp-http-header-audit\n" #: aiutocomputerhelp-http-header-audit.php:43 aiutocomputerhelp-http-header-audit.php:44 aiutocomputerhelp-http-header-audit.php:111 msgid "AiutoComputerHelp HTTP Header Audit" msgstr "" #: aiutocomputerhelp-http-header-audit.php:84 msgid "Checking response headers…" msgstr "" #: aiutocomputerhelp-http-header-audit.php:85 msgid "The audit could not be completed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:86 msgid "Pass" msgstr "" #: aiutocomputerhelp-http-header-audit.php:87 msgid "Review" msgstr "" #: aiutocomputerhelp-http-header-audit.php:88 msgid "Warning" msgstr "" #: aiutocomputerhelp-http-header-audit.php:89 msgid "Info" msgstr "" #: aiutocomputerhelp-http-header-audit.php:90 msgid "High" msgstr "" #: aiutocomputerhelp-http-header-audit.php:91 msgid "Recommended" msgstr "" #: aiutocomputerhelp-http-header-audit.php:92 msgid "Context-dependent" msgstr "" #: aiutocomputerhelp-http-header-audit.php:93 msgid "Informational" msgstr "" #: aiutocomputerhelp-http-header-audit.php:94 msgid "Redirects" msgstr "" #: aiutocomputerhelp-http-header-audit.php:112 msgid "Read-only analysis of HTTP security headers returned by this WordPress site. The plugin does not modify server, WordPress, .htaccess, CDN, or proxy configuration." msgstr "" #: aiutocomputerhelp-http-header-audit.php:115 msgid "URL to audit" msgstr "" #: aiutocomputerhelp-http-header-audit.php:117 msgid "For safety, only URLs on this WordPress site are accepted. Redirects are followed only while they remain on the same host." msgstr "" #: aiutocomputerhelp-http-header-audit.php:118 msgid "Run header audit" msgstr "" #: aiutocomputerhelp-http-header-audit.php:127 msgid "Check" msgstr "" #: aiutocomputerhelp-http-header-audit.php:128 msgid "Status" msgstr "" #: aiutocomputerhelp-http-header-audit.php:129 msgid "Priority" msgstr "" #: aiutocomputerhelp-http-header-audit.php:130 msgid "Observed value" msgstr "" #: aiutocomputerhelp-http-header-audit.php:131 msgid "Assessment" msgstr "" #: aiutocomputerhelp-http-header-audit.php:139 msgid "A missing header is not automatically a vulnerability, and a present header does not prove that a site is secure. The plugin deliberately avoids a numeric security score because several headers are application-specific deployment choices." msgstr "" #: aiutocomputerhelp-http-header-audit.php:152 msgid "You are not allowed to run this audit." msgstr "" #: aiutocomputerhelp-http-header-audit.php:163 msgid "The target must use HTTP or HTTPS and belong to this WordPress site." msgstr "" #: aiutocomputerhelp-http-header-audit.php:261 msgid "A redirect attempted to leave the current WordPress site." msgstr "" #: aiutocomputerhelp-http-header-audit.php:267 msgid "A redirect loop was detected before a response could be analyzed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:335 msgid "The redirect trace could not be completed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:453 msgid "The audited response is delivered over HTTPS." msgstr "" #: aiutocomputerhelp-http-header-audit.php:454 msgid "The audited response is not using HTTPS. Security headers cannot replace transport encryption." msgstr "" #: aiutocomputerhelp-http-header-audit.php:462 msgid "HSTS is only effective when received over HTTPS." msgstr "" #: aiutocomputerhelp-http-header-audit.php:464 msgid "HSTS is not enabled. This may be an intentional compatibility choice; enabling it protects future visits from HTTP downgrade and certificate-bypass scenarios." msgstr "" #: aiutocomputerhelp-http-header-audit.php:473 msgid "A report-only CSP is present. It can be useful for testing, but it does not enforce restrictions." msgstr "" #: aiutocomputerhelp-http-header-audit.php:487 msgid "MIME sniffing is disabled." msgstr "" #: aiutocomputerhelp-http-header-audit.php:488 msgid "Set this header to nosniff to prevent MIME type sniffing." msgstr "" #: aiutocomputerhelp-http-header-audit.php:532 msgid "No X-Powered-By disclosure was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:533 msgid "Technology disclosure is present. Removing unnecessary platform or version detail reduces passive fingerprinting." msgstr "" #: aiutocomputerhelp-http-header-audit.php:538 msgid "The Server header was not exposed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:540 msgid "The Server header appears to expose version detail. Consider reducing unnecessary fingerprinting information when you control this header." msgstr "" #: aiutocomputerhelp-http-header-audit.php:542 msgid "The server identifies itself generically. This is informational unless unnecessary version detail is also exposed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:549 msgid "The legacy browser XSS filter is explicitly disabled. Modern protection should rely on safe output handling and CSP." msgstr "" #: aiutocomputerhelp-http-header-audit.php:550 msgid "This legacy header is deprecated and should not be relied on as an XSS defense. Some historical filter modes could introduce security problems." msgstr "" #: aiutocomputerhelp-http-header-audit.php:557 msgid "HPKP is obsolete and risky to deploy. Remove this header rather than treating it as a current security control." msgstr "" #: aiutocomputerhelp-http-header-audit.php:560 msgid "HPKP report-only is obsolete. Review whether this legacy header is still needed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:565 msgid "Expect-CT is obsolete in modern browsers and should not be treated as a current security control." msgstr "" #: aiutocomputerhelp-http-header-audit.php:583 msgid "The HTTP upgrade path could not be determined for this target." msgstr "" #: aiutocomputerhelp-http-header-audit.php:592 msgid "The HTTP upgrade path could not be tested safely for this target." msgstr "" #: aiutocomputerhelp-http-header-audit.php:598 msgid "The server-side HTTP probe could not be completed. This result is informational and does not prove that browser upgrades are absent." msgstr "" #: aiutocomputerhelp-http-header-audit.php:604 msgid "A plain HTTP request is redirected to HTTPS on the same host." msgstr "" #: aiutocomputerhelp-http-header-audit.php:607 msgid "The tested HTTP URL did not end on HTTPS. Review whether plain HTTP should remain reachable for this site." msgstr "" #: aiutocomputerhelp-http-header-audit.php:623 msgid "No redirect-chain metadata was available for this response." msgstr "" #: aiutocomputerhelp-http-header-audit.php:664 msgid "not followed:" msgstr "" #: aiutocomputerhelp-http-header-audit.php:668 msgid "The redirect chain contains an HTTPS-to-HTTP downgrade. Redirect chains should not move a secure request back to plaintext HTTP." msgstr "" #: aiutocomputerhelp-http-header-audit.php:673 msgid "A redirect loop was detected. The repeated target was not requested again." msgstr "" #: aiutocomputerhelp-http-header-audit.php:676 msgid "A redirect points to an invalid or unsupported non-HTTP(S) target. The target was not followed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:678 msgid "The redirect chain leaves the current WordPress host. Cross-host redirects can be intentional, but the external target was not followed and should be reviewed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:680 msgid "A redirect target is outside the ports or target shape permitted by this self-audit. It was not followed." msgstr "" #: aiutocomputerhelp-http-header-audit.php:682 msgid "The redirect chain exceeded the audit hop limit. Long chains add latency and can hide unintended routing behavior." msgstr "" #: aiutocomputerhelp-http-header-audit.php:684 msgid "A redirect-class response was returned without a usable Location target, so the chain could not be completed deterministically." msgstr "" #: aiutocomputerhelp-http-header-audit.php:688 msgid "The redirect chain completed, but four or more redirects were observed. Review whether the chain can be simplified." msgstr "" #: aiutocomputerhelp-http-header-audit.php:692 msgid "No redirect chain was observed for the audited URL." msgstr "" #: aiutocomputerhelp-http-header-audit.php:695 msgid "The observed redirect chain stayed on the permitted host, used HTTP(S), completed within a short number of hops, and contained no HTTPS-to-HTTP downgrade." msgstr "" #: aiutocomputerhelp-http-header-audit.php:709 msgid "Redirect-chain integrity requires review, but no detailed diagnostic text was produced. Re-run the audit and review the observed chain." msgstr "" #: aiutocomputerhelp-http-header-audit.php:748 msgid "HSTS is present but no valid max-age directive was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:753 msgid "Conflicting max-age directives were detected. Keep a single unambiguous HSTS policy." msgstr "" #: aiutocomputerhelp-http-header-audit.php:758 msgid "HSTS is explicitly disabled with max-age=0." msgstr "" #: aiutocomputerhelp-http-header-audit.php:761 msgid "HSTS max-age is shorter than six months. This can be intentional during staged deployment; review the chosen duration." msgstr "" #: aiutocomputerhelp-http-header-audit.php:764 msgid "HSTS is present with a substantial max-age." msgstr "" #: aiutocomputerhelp-http-header-audit.php:766 msgid "includeSubDomains is not set; add it only if every subdomain is ready for HTTPS." msgstr "" #: aiutocomputerhelp-http-header-audit.php:769 msgid "The preload token is present, but the usual preload prerequisites are not all visible in this header." msgstr "" #: aiutocomputerhelp-http-header-audit.php:784 msgid "A report-only policy is present, but no enforced CSP was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:786 msgid "No enforced Content-Security-Policy header was detected. CSP can provide an important additional mitigation against script injection when deployed carefully." msgstr "" #: aiutocomputerhelp-http-header-audit.php:797 msgid "Neither script-src nor default-src restricts script sources." msgstr "" #: aiutocomputerhelp-http-header-audit.php:801 msgid "The effective script policy allows 'unsafe-eval'." msgstr "" #: aiutocomputerhelp-http-header-audit.php:805 msgid "The effective script policy contains a wildcard source." msgstr "" #: aiutocomputerhelp-http-header-audit.php:812 msgid "'unsafe-inline' is present alongside a nonce or hash. Modern CSP processing can ignore it for scripts, but review compatibility intent." msgstr "" #: aiutocomputerhelp-http-header-audit.php:815 msgid "The effective script policy allows 'unsafe-inline' without a nonce or hash." msgstr "" #: aiutocomputerhelp-http-header-audit.php:824 msgid "object-src is not explicitly defined." msgstr "" #: aiutocomputerhelp-http-header-audit.php:829 msgid "object-src is not restricted to 'none'." msgstr "" #: aiutocomputerhelp-http-header-audit.php:836 msgid "base-uri is not explicitly defined." msgstr "" #: aiutocomputerhelp-http-header-audit.php:840 msgid "An enforced CSP was detected without the high-signal weaknesses checked by this version." msgstr "" #: aiutocomputerhelp-http-header-audit.php:857 msgid "CSP frame-ancestors allows a wildcard source. Confirm that broad framing is intentional." msgstr "" #: aiutocomputerhelp-http-header-audit.php:858 msgid "CSP frame-ancestors controls which sites may embed this page." msgstr "" #: aiutocomputerhelp-http-header-audit.php:862 msgid "X-Frame-Options provides clickjacking protection. CSP frame-ancestors offers more flexible modern control." msgstr "" #: aiutocomputerhelp-http-header-audit.php:865 msgid "A framing header is present, but its value is not DENY or SAMEORIGIN. ALLOW-FROM is obsolete in modern browsers." msgstr "" #: aiutocomputerhelp-http-header-audit.php:867 msgid "Neither CSP frame-ancestors nor a recognized X-Frame-Options policy was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:878 msgid "No Content-Type header was detected on the final response." msgstr "" #: aiutocomputerhelp-http-header-audit.php:885 msgid "A textual response was detected without an explicit charset parameter. Review whether the server should declare one." msgstr "" #: aiutocomputerhelp-http-header-audit.php:888 msgid "A textual Content-Type with an explicit charset was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:890 msgid "The response is not a textual content type, so an explicit charset is not expected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:904 msgid "No explicit referrer policy was detected. Define one deliberately rather than relying only on browser defaults." msgstr "" #: aiutocomputerhelp-http-header-audit.php:937 msgid "The header is present, but no recognized Referrer-Policy value was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:942 msgid "The effective policy is unsafe-url, which can disclose full URLs in cross-origin requests." msgstr "" #: aiutocomputerhelp-http-header-audit.php:944 msgid "Unrecognized policy tokens were also detected and should be reviewed." msgstr "" #. translators: %s: effective Referrer-Policy token. #: aiutocomputerhelp-http-header-audit.php:957 #, php-format msgid "A recognized effective policy (%s) was detected, but the header also contains unrecognized policy tokens. Review whether they are intentional fallbacks for newer user agents." msgstr "" #. translators: %s: effective Referrer-Policy token. #: aiutocomputerhelp-http-header-audit.php:971 #, php-format msgid "A valid fallback list was detected. The last recognized policy, %s, is effective for supporting user agents." msgstr "" #: aiutocomputerhelp-http-header-audit.php:977 msgid "A recognized referrer policy was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:993 msgid "Not set. This policy is application-specific; consider restricting browser features that the site does not need." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1029 msgid "The header is present, but no syntactically valid Permissions-Policy directive was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1033 msgid "At least one valid Permissions-Policy directive was detected, but one or more directives or allowlists are malformed. Review the policy before relying on it." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1037 msgid "The policy syntax is valid, but a wildcard allowlist grants a browser feature to all origins. Confirm that this broad access is intentional." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1040 msgid "A syntactically valid browser feature policy was detected. Verify that the selected features and origins match what the site actually needs." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1135 msgid "Not set. COOP is application-specific; it is mainly useful when opener isolation or cross-origin isolation is required." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1139 msgid "The COOP header should contain one recognized policy token. Multiple or parameterized values are not treated as a valid COOP policy by this audit." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1145 msgid "An unrecognized Cross-Origin-Opener-Policy value was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1149 msgid "COOP is explicitly set to unsafe-none, which keeps the default opener-sharing behavior and does not provide opener isolation." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1153 msgid "A recognized COOP policy is present. same-origin-allow-popups intentionally relaxes popup isolation for integrations such as OAuth or payment flows." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1157 msgid "A recognized COOP policy is present. noopener-allow-popups severs opener relationships more aggressively, including between some same-origin documents." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1160 msgid "COOP same-origin is enabled and can contribute to opener isolation and the prerequisites for cross-origin isolation." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1172 msgid "Not set. COEP is application-specific and is mainly needed when a document requires cross-origin isolation or stricter embedding rules." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1177 msgid "The COEP header is malformed, contains multiple policy tokens, or uses an unrecognized policy value or parameter." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1181 msgid "COEP is explicitly set to unsafe-none, which keeps the default cross-origin embedding behavior and does not contribute to cross-origin isolation." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1185 msgid "COEP credentialless is enabled. Cross-origin no-cors requests are made without credentials, which can support cross-origin isolation while changing resource-loading behavior." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1186 msgid "COEP require-corp is enabled. Cross-origin no-cors resources must explicitly permit embedding through CORP or be requested using an appropriate CORS mode." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1188 msgid "A report-to endpoint parameter is also present." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1253 msgid "Not set. CORP is resource- and application-specific; public resources may intentionally remain loadable cross-origin." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1257 msgid "The CORP header should contain one recognized policy token." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1262 msgid "An unrecognized Cross-Origin-Resource-Policy value was detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1266 msgid "CORP explicitly allows cross-origin loading. This is valid for public resources and some COEP deployments, but the broad policy should be intentional." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1270 msgid "CORP same-site is enabled. It restricts no-cors loading to the same site, which is broader than same-origin and should match the resource-sharing design." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1273 msgid "CORP same-origin is enabled, restricting no-cors loading of this response to the same origin." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1311 msgid "COOP and COEP satisfy the usual isolation header pair, but Permissions-Policy blocks the cross-origin-isolated feature. Browser APIs that depend on crossOriginIsolated will remain unavailable." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1314 msgid "COOP and COEP satisfy the usual isolation header pair, but the relevant Permissions-Policy state could not be determined confidently." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1316 msgid "The response headers satisfy the main header prerequisites for cross-origin isolation. Verify the runtime state with window.crossOriginIsolated if the application depends on isolated-only APIs." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1320 msgid "Cross-origin isolation is not requested by these response headers. Most sites do not require it unless they use APIs or isolation properties that depend on COOP and COEP." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1323 msgid "The full COOP same-origin plus COEP require-corp/credentialless header pair is not present. Individual COOP or COEP policies may still be intentional and useful on their own." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1440 msgid "No explicit CORS sharing headers were detected on this response. This does not prevent normal same-origin browser access." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1454 msgid "Access-Control-Allow-Origin uses the wildcard, which is valid for public non-credentialed CORS access." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1457 msgid "Access-Control-Allow-Origin is set to null. This value is valid syntax but is risky because sandboxed or non-hierarchical documents can also have a null origin." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1460 msgid "Access-Control-Allow-Origin must contain a single serialized origin, the wildcard *, or null. The observed value is not valid for this audit." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1463 msgid "A single explicit CORS origin was detected. Whether that origin should be authorized depends on the application." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1471 msgid "Access-Control-Allow-Credentials only accepts the case-sensitive value true; otherwise the header should be omitted." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1474 msgid "Credentialed CORS access is enabled and should only be paired with origins that are deliberately trusted." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1483 msgid "Access-Control-Allow-Methods contains an empty or invalid HTTP method token." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1493 msgid "Access-Control-Allow-Headers contains an empty or invalid HTTP field-name token." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1499 msgid "CORS auxiliary response headers are present without Access-Control-Allow-Origin. Browsers will not expose a cross-origin response based on these headers alone." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1503 msgid "Access-Control-Allow-Origin: * is incompatible with credentialed CORS requests. Credentialed sharing requires an explicit origin." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1507 msgid "Access-Control-Allow-Methods uses * while credentials are enabled. For credentialed requests the wildcard does not have wildcard semantics." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1511 msgid "Access-Control-Allow-Headers uses * while credentials are enabled. For credentialed requests the wildcard does not have wildcard semantics." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1517 msgid "Vary: Origin was detected, which is appropriate when Access-Control-Allow-Origin is selected dynamically from the request Origin." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1519 msgid "Vary: Origin was not detected. This is not necessarily an error for a fixed single-origin policy, but it is normally needed when Access-Control-Allow-Origin changes according to the request Origin." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1540 msgid "A syntactically coherent basic CORS response policy was detected. This audit does not determine whether the allowed origin is authorized by the application." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1620 msgid "No Cache-Control header was detected. Public pages do not universally require no-store; caching policy should match the sensitivity of the response." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1721 msgid "One or more Cache-Control directives are malformed or use an invalid value for a standard directive. Review the header before relying on its caching behavior." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1725 msgid "Only unrecognized Cache-Control extension directives were detected. Extensions are permitted, but no standard response caching behavior can be inferred from this header." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1729 msgid "The response contains one or more Cache-Control directives normally defined for requests. Confirm that they are intentional and not the result of a configuration mistake." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1733 msgid "Standard Cache-Control directives were detected together with unrecognized extension directives. Extension directives are allowed, but their effect should be reviewed separately." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1737 msgid "The response sets a cookie while explicitly allowing shared/public caching. Confirm that this behavior is intentional and does not expose personalized content." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1740 msgid "A syntactically valid standard cache policy is present. Whether it is appropriate depends on the sensitivity and personalization of this response." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1885 msgid "No Set-Cookie headers were detected on the audited response." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1899 msgid "A Set-Cookie header could not be parsed safely." msgstr "" #: aiutocomputerhelp-http-header-audit.php:1900 msgid "Unparseable cookie" msgstr "" #. translators: 1: cookie name, 2: cookie attribute. #: aiutocomputerhelp-http-header-audit.php:1927 #, php-format msgid "Cookie %1$s uses %2$s with an unexpected value; this attribute is a flag." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1938 #, php-format msgid "Cookie %s has an invalid SameSite value." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1944 #, php-format msgid "Cookie %s uses SameSite=None without Secure." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1951 #, php-format msgid "Cookie %s does not explicitly set SameSite." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1959 #, php-format msgid "Cookie %s uses Partitioned without Secure." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1973 #, php-format msgid "Cookie %s uses a secure cookie-name prefix but does not set the required Secure attribute." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1979 #, php-format msgid "Cookie %s uses a secure cookie-name prefix on a non-HTTPS response." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1989 #, php-format msgid "Cookie %s uses a __Host- style prefix but also sets Domain." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:1996 #, php-format msgid "Cookie %s uses a __Host- style prefix but Path is not explicitly set to /." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:2005 #, php-format msgid "Cookie %s uses an __Http- style prefix without HttpOnly." msgstr "" #. translators: 1: cookie name, 2: comma-separated attribute names. #: aiutocomputerhelp-http-header-audit.php:2015 #, php-format msgid "Cookie %1$s repeats security-relevant attributes (%2$s). Review which value user agents will apply." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:2025 #, php-format msgid "Cookie %s does not set Secure; whether this is appropriate depends on its purpose and transport requirements." msgstr "" #. translators: %s: cookie name. #: aiutocomputerhelp-http-header-audit.php:2032 #, php-format msgid "Cookie %s does not set HttpOnly; this can be legitimate when JavaScript access is required." msgstr "" #: aiutocomputerhelp-http-header-audit.php:2051 msgid "No objective Set-Cookie attribute conflicts checked by this version were detected." msgstr "" #: aiutocomputerhelp-http-header-audit.php:2165 msgid "Conflicting HSTS max-age directives." msgstr "" #: aiutocomputerhelp-http-header-audit.php:2171 msgid "Multiple different X-Frame-Options values." msgstr "" #: aiutocomputerhelp-http-header-audit.php:2179 msgid "CSP frame-ancestors and X-Frame-Options express different framing intentions." msgstr "" #: aiutocomputerhelp-http-header-audit.php:2184 msgid "No obvious conflicting singleton security header values were detected by this version." msgstr "" #: aiutocomputerhelp-http-header-audit.php:2186 msgid "Conflicting security policies can produce browser-dependent or difficult-to-understand behavior. Review the listed headers." msgstr ""