# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

# Mixed Content Blocker
# LOCALIZATION NOTE: "%1$S" is the URI of the blocked mixed content resource
BlockMixedDisplayContent = Blocked loading mixed display content "%1$S"
BlockMixedActiveContent = Blocked loading mixed active content "%1$S"

# CORS
# LOCALIZATION NOTE: Do not translate "Access-Control-Allow-Origin", Access-Control-Allow-Credentials, Access-Control-Allow-Methods, Access-Control-Allow-Headers
CORSDisabled=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: CORS disabled).
CORSRequestNotHttp=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: CORS request not http).
CORSMissingAllowOrigin=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: CORS header 'Access-Control-Allow-Origin' missing).
CORSAllowOriginNotMatchingOrigin=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: CORS header 'Access-Control-Allow-Origin' does not match '%2$S').
CORSMethodNotFound=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: Did not find method in CORS header 'Access-Control-Allow-Methods').
CORSMissingAllowCredentials=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: expected 'true' in CORS header 'Access-Control-Allow-Credentials').
CORSInvalidAllowMethod=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: invalid token '%2$S' in CORS header 'Access-Control-Allow-Methods').
CORSInvalidAllowHeader=Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at %1$S. (Reason: invalid token '%2$S' in CORS header 'Access-Control-Allow-Headers').

# LOCALIZATION NOTE: Do not translate "Strict-Transport-Security", "HSTS", "max-age" or "includeSubDomains"
STSUnknownError=Strict-Transport-Security: אירעה שגיאה בלתי ידועה בעת עיבוד הכותרת שצוינה על־ידי האתר.
STSUntrustworthyConnection=Strict-Transport-Security: החיבור לאתר אינו אמין, לכן הכותרת שצוינה לא נכללה.
STSCouldNotParseHeader=Strict-Transport-Security: האתר ציין כותרת שלא ניתן לפענח בהצלחה.
STSNoMaxAge=Strict-Transport-Security: האתר ציין כותרת שלא כללה הנחיית ‚max-age’.
STSMultipleMaxAges=Strict-Transport-Security: האתר ציין כותרת שכוללת מספר הנחיות ‚max-age’.
STSInvalidMaxAge=Strict-Transport-Security: האתר ציין כותרת שכוללת הנחיית ‚max-age’ שגויה.
STSMultipleIncludeSubdomains=Strict-Transport-Security: האתר ציין כותרת שכוללת מספר הנחיות ‚includeSubDomains’.
STSInvalidIncludeSubdomains=Strict-Transport-Security: האתר ציין כותרת שכוללת הנחיית ‚includeSubDomains’ שגויה.
STSCouldNotSaveState=Strict-Transport-Security: אירעה שגיאה בעת סימון האתר כמארח Strict-Transport-Security.

# LOCALIZATION NOTE: Do not translate "SHA-1"
SHA1Sig=This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.
InsecurePasswordsPresentOnPage=Password fields present on an insecure (http://) page. This is a security risk that allows user login credentials to be stolen.
InsecureFormActionPasswordsPresent=Password fields present in a form with an insecure (http://) form action. This is a security risk that allows user login credentials to be stolen.
InsecurePasswordsPresentOnIframe=Password fields present on an insecure (http://) iframe. This is a security risk that allows user login credentials to be stolen.
# LOCALIZATION NOTE: "%1$S" is the URI of the insecure mixed content resource
LoadingMixedActiveContent2=Loading mixed (insecure) active content "%1$S" on a secure page
LoadingMixedDisplayContent2=Loading mixed (insecure) display content "%1$S" on a secure page

# LOCALIZATION NOTE: Do not translate "allow-scripts", "allow-same-origin", "sandbox" or "iframe"
BothAllowScriptsAndSameOriginPresent=An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.

# Sub-Resource Integrity
# LOCALIZATION NOTE: Do not translate "script" or "integrity". "%1$S" is the invalid token found in the attribute.
MalformedIntegrityHash=לרכיב ה־script יש גיבוב פגום בתכונת ה־integrity שלו: “%1$S”. התבנית הנכונה היא „<hash algorithm>-<hash value>”.
# LOCALIZATION NOTE: Do not translate "integrity"
InvalidIntegrityLength=לגיבוב שבתכונה integrity יש אורך שגוי.
# LOCALIZATION NOTE: Do not translate "integrity"
InvalidIntegrityBase64=לא ניתן לפענח את הגיבוב שבתכונה integrity.
# LOCALIZATION NOTE: Do not translate "integrity". "%1$S" is the type of hash algorithm in use (e.g. "sha256").
IntegrityMismatch=אף אחד מהגיבובים מסוג „%1$S” במאפיין ה־integrity אינו תואם לתוכן של תת המשאב.
# LOCALIZATION NOTE: "%1$S" is the URI of the sub-resource that cannot be protected using SRI.
# LOCALIZATION NOTE: Do not translate "integrity". "%1$S" is the invalid hash algorithm found in the attribute.
UnsupportedHashAlg=אלגוריתם הגיבוב אינו נתמך בתכונה integrity:‏ „%1$S”
# LOCALIZATION NOTE: Do not translate "integrity"
NoValidMetadata=התכונה integrity אינה מכילה נתוני על תקפים.

# LOCALIZATION NOTE: Do not translate "RC4".
WeakCipherSuiteWarning=This site uses the cipher RC4 for encryption, which is deprecated and insecure.

#XCTO: nosniff
# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options: nosniff".
# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options" and also do not translate "nosniff".
XCTOHeaderValueMissing=אזהרה על הכותרת X-Content-Type-Options: הערך היה „%1$S”; יתכן שהתכוונת לשלוח „nosniff”?

# LOCALIZATION NOTE: Do not translate "importScripts()"

# LOCALIZATION NOTE: Do not translate "data: URI".
BlockTopLevelDataURINavigation=הניווט אל ה־data: URI העליון אסור (נחסמה הטעינה של: „%1$S”)
BlockSubresourceRedirectToData=מתבצעת העברה לנתונים בלתי מאובטחים: הכתובת חסומה (נחסמה הטעינה של: „%1$S”)

BlockSubresourceFTP=טעינת תת־משאב של FTP בתוך עמוד http(s) אינה מורשית (נחסמה הטעינה של: „%1$S”)

# LOCALIZATION NOTE (BrowserUpgradeInsecureDisplayRequest):
# %1$S is the browser name "brandShortName"; %2$S is the URL of the upgraded request; %1$S is the upgraded scheme.
BrowserUpgradeInsecureDisplayRequest = ‏%1$S משדרג בקשת תצוגה בלתי מאובטחת ‚%2$S’ להשתמש ב־‚%3$S’
# LOCALIZATION NOTE (RunningClearSiteDataValue):
# %S is the URI of the resource whose data was cleaned up
RunningClearSiteDataValue=הכותרת Clear-Site-Data אילצה לנקות של הנתונים של „%S”.
UnknownClearSiteDataValue=נמצאה כותרת Clear-Site-Data. ערך בלתי מוכר „%S”.

# Reporting API
# LOCALIZATION NOTE(ReportingHeaderInvalidURLEndpoint): %1$S is the invalid URL, %2$S is the group name

# TODO: would be nice to add a link to the Feature-Policy MDN documentation here. See bug 1449501
# TODO: would be nice to add a link to the Feature-Policy MDN documentation here. See bug 1449501

# LOCALIZATION NOTE: "%1$S" is the limitation length (bytes) of referrer URI, "%2$S" is the origin of the referrer URI.
# LOCALIZATION NOTE: "%1$S" is the limitation length (bytes) of referrer URI, "%2$S" is the origin of the referrer URI.

# X-Frame-Options
# LOCALIZATION NOTE: %1$S is the header value, %2$S is frame URI and %3$S is the parent document URI.
# LOCALIZATION NOTE: %1$S is the header value, %2$S is frame URI and %3$S is the parent document URI.
# LOCALIZATION NOTE: %1$S is the header value, %2$S is frame URI and %3$S is the parent document URI.