3 files changed, 301 insertions, 0 deletions
diff --git a/l10n-zh-CN/dom/chrome/security/caps.properties b/l10n-zh-CN/dom/chrome/security/caps.properties
new file mode 100755
index 0000000000..81913c0073
--- /dev/null
+++ b/l10n-zh-CN/dom/chrome/security/caps.properties
@@ -0,0 +1,9 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+CheckLoadURIError = 安全错误：位于 %S 的内容不可以加载或者链接至 %S。
+CheckSameOriginError = 安全错误：位于 %S 的内容不可以加载来自 %S 的数据。
+ExternalDataError = 安全错误：%S 上的内容试图加载 %S，但当被用作图像时，可能无法加载外部数据。 
+
+CreateWrapperDenied = 为类 %S 创建包裹器时权限不足
+CreateWrapperDeniedForOrigin = <%2$S> 无足够权限创建类 %1$S 对象的包裹器。
diff --git a/l10n-zh-CN/dom/chrome/security/csp.properties b/l10n-zh-CN/dom/chrome/security/csp.properties
new file mode 100755
index 0000000000..e41d7330b4
--- /dev/null
+++ b/l10n-zh-CN/dom/chrome/security/csp.properties
@@ -0,0 +1,125 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+# CSP Warnings:
+# LOCALIZATION NOTE (CSPViolation):
+# %1$S is the reason why the resource has not been loaded.
+CSPViolation = 页面设置阻止读取一项资源：%1$S
+# LOCALIZATION NOTE (CSPViolationWithURI):
+# %1$S is the directive that has been violated.
+# %2$S is the URI of the resource which violated the directive.
+CSPViolationWithURI = 页面设置阻止读取位于 %2$S 的一项资源("%1$S")。
+# LOCALIZATION NOTE (CSPROViolation):
+# %1$S is the reason why the resource has not been loaded.
+CSPROViolation = 发生一次 report-only CSP 策略违反 ("%1$S")。此行为已被允许，并且一份 CSP 报告已被发送。
+# LOCALIZATION NOTE (CSPROViolationWithURI):
+# %1$S is the directive that has been violated.
+# %2$S is the URI of the resource which violated the directive.
+CSPROViolationWithURI = 该页面设置了观测在 %2$S ("%1$S") 的资源加载。一个 CSP 报告已开始发送。
+# LOCALIZATION NOTE (triedToSendReport):
+# %1$S is the URI we attempted to send a report to.
+triedToSendReport = 试图发送报告到无效的 URI：“%1$S”
+tooManyReports = 已阻止在短时间内发送过多 CSP 报告。
+# LOCALIZATION NOTE (couldNotParseReportURI):
+# %1$S is the report URI that could not be parsed
+couldNotParseReportURI = 无法解析报告的 URI：%1$S
+# LOCALIZATION NOTE (couldNotProcessUnknownDirective):
+# %1$S is the unknown directive
+couldNotProcessUnknownDirective = 不能处理未知的指令“%1$S”
+# LOCALIZATION NOTE (ignoringUnknownOption):
+# %1$S is the option that could not be understood
+ignoringUnknownOption = 忽略了未知选项 %1$S
+# LOCALIZATION NOTE (ignoringDuplicateSrc):
+# %1$S defines the duplicate src
+ignoringDuplicateSrc = 忽略重复的来源 %1$S
+# LOCALIZATION NOTE (ignoringNonAsciiToken):
+# %1$S defines the name of the directive
+# %2$S is the token string containing non-ASCII characters.
+ignoringNonAsciiToken = 忽略带有非 ASCII 标记“%2$S”的指令“%1$S”
+# LOCALIZATION NOTE (ignoringSrcFromMetaCSP):
+# %1$S defines the ignored src
+ignoringSrcFromMetaCSP = 忽略源 '%1$S' (通过 meta 元素传递时不支持)。
+# LOCALIZATION NOTE (ignoringSrcWithinNonceOrHashDirective):
+# %1$S is the ignored src (e.g. "unsafe-inline")
+# %2$S is the directive (e.g. "script-src-elem")
+ignoringSrcWithinNonceOrHashDirective = 忽略 %2$S 中的 “%1$S”：指定了 nonce-source 或 hash-source
+# LOCALIZATION NOTE (ignoringScriptSrcForStrictDynamic):
+# %1$S is the ignored src
+# %1$S is the directive src (e.g. "script-src-elem")
+# 'strict-dynamic' should not be localized
+ignoringScriptSrcForStrictDynamic = 忽略 %2$S 中的“%1$S”：指定了“strict-dynamic”
+# LOCALIZATION NOTE (ignoringStrictDynamic):
+# %1$S is the ignored src
+ignoringStrictDynamic = 忽略来源“%1$S”（仅 script-src 内可支持）。 
+# LOCALIZATION NOTE (ignoringUnsafeEval):
+# %1$S is the csp directive (e.g. script-src-elem)
+# 'unsafe-eval' and 'wasm-unsafe-eval' should not be localized
+ignoringUnsafeEval = 忽略“%1$S”中的“unsafe-eval”或“wasm-unsafe-eval”。
+# LOCALIZATION NOTE (strictDynamicButNoHashOrNonce):
+# %1$S is the csp directive that contains 'strict-dynamic'
+# 'strict-dynamic' should not be localized
+strictDynamicButNoHashOrNonce = “%1$S”内的关键字 ‘strict-dynamic’ 没有有效的随机数或散列，可能阻止加载所有脚本
+# LOCALIZATION NOTE (reportURInotHttpsOrHttp2):
+# %1$S is the ETLD of the report URI that is not HTTP or HTTPS
+reportURInotHttpsOrHttp2 = 报告 URI (%1$S) 应该用 HTTP 或 HTTPS URI。
+# LOCALIZATION NOTE (reportURInotInReportOnlyHeader):
+# %1$S is the ETLD of the page with the policy
+reportURInotInReportOnlyHeader = 此网站 (%1$S) 有一个 Report-Only 策略却没有报告 URI。CSP 将不会阻挡并且无法报告此策略的违反情况。
+# LOCALIZATION NOTE (failedToParseUnrecognizedSource):
+# %1$S is the CSP Source that could not be parsed
+failedToParseUnrecognizedSource = 解析不可识别的资源 %1$S 失败
+# LOCALIZATION NOTE (upgradeInsecureRequest):
+# %1$S is the URL of the upgraded request; %2$S is the upgraded scheme.
+upgradeInsecureRequest = 升级不安全的请求“%1$S”至使用“%2$S”
+# LOCALIZATION NOTE (ignoreSrcForDirective):
+ignoreSrcForDirective = 根据 '%1$S' 指示忽略 src
+# LOCALIZATION NOTE (hostNameMightBeKeyword):
+# %1$S is the hostname in question and %2$S is the keyword
+hostNameMightBeKeyword = %1$S 被识别为主机名而不是关键词。如果您想将其识别为关键词，应使用'%2$S'（用单引号括起来）。
+# LOCALIZATION NOTE (notSupportingDirective):
+# directive is not supported (e.g. 'reflected-xss')
+notSupportingDirective = 不支持指令“%1$S”。指令和值将被忽略。
+# LOCALIZATION NOTE (blockAllMixedContent):
+# %1$S is the URL of the blocked resource load.
+blockAllMixedContent = 拦截不安全的请求“%1$S”。
+# LOCALIZATION NOTE (ignoringDirectiveWithNoValues):
+# %1$S is the name of a CSP directive that requires additional values
+ignoringDirectiveWithNoValues = 忽略 ‘%1$S‘，因为它未包含任何参数。
+# LOCALIZATION NOTE (ignoringReportOnlyDirective):
+# %1$S is the directive that is ignored in report-only mode.
+ignoringReportOnlyDirective = 在提供有 report-only 策略 ‘%1$S’ 时忽略沙盒指令
+# LOCALIZATION NOTE (IgnoringSrcBecauseOfDirective):
+# %1$S is the name of the src that is ignored.
+# %2$S is the name of the directive that causes the src to be ignored.
+IgnoringSrcBecauseOfDirective=因 ‘%2$S’ 指令忽略 ‘%1$S’
+# LOCALIZATION NOTE (IgnoringSourceWithinDirective):
+# %1$S is the ignored src
+# %2$S is the directive  which supports src
+IgnoringSourceWithinDirective = 忽略来源“%1$S”（“%2$S”中不支持）。
+# LOCALIZATION NOTE (IgnoringSourceWithinDirective):
+# %1$S is the ignored src
+obsoleteBlockAllMixedContent = 忽略“%1$S”，因升级混合内容显示而导致 block-all-mixed-content 失效。
+
+
+# CSP Errors:
+# LOCALIZATION NOTE (couldntParseInvalidSource):
+# %1$S is the source that could not be parsed
+couldntParseInvalidSource = 无法解析无效的源 %1$S
+# LOCALIZATION NOTE (couldntParseInvalidHost):
+# %1$S is the host that's invalid
+couldntParseInvalidHost = 不能解析无效的主机 %1$S
+# LOCALIZATION NOTE (couldntParsePort):
+# %1$S is the string source
+couldntParsePort = 不能解析 %1$S 中的端口
+# LOCALIZATION NOTE (duplicateDirective):
+# %1$S is the name of the duplicate directive
+duplicateDirective = 检测到重复的指令 %1$S。除首个指令外所有其他的都将被忽略。
+# LOCALIZATION NOTE (couldntParseInvalidSandboxFlag):
+# %1$S is the option that could not be understood
+couldntParseInvalidSandboxFlag = 无法解析无效的沙盒标识“%1$S”
+
+# LOCALIZATION NOTE (CSPMessagePrefix):
+# Do not translate "Content-Security-Policy", only handle spacing for the colon.
+# %S is a console message that is being prefixed here.
+CSPMessagePrefix = Content-Security-Policy：%S
diff --git a/l10n-zh-CN/dom/chrome/security/security.properties b/l10n-zh-CN/dom/chrome/security/security.properties
new file mode 100755
index 0000000000..3473b6e134
--- /dev/null
+++ b/l10n-zh-CN/dom/chrome/security/security.properties
@@ -0,0 +1,167 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+# Mixed Content Blocker
+# LOCALIZATION NOTE: "%1$S" is the URI of the blocked mixed content resource
+BlockMixedDisplayContent = 已阻止显示混合内容“%1$S”
+BlockMixedActiveContent = 已阻止加载混合活动内容“%1$S”
+
+# CORS
+# LOCALIZATION NOTE: Do not translate "Access-Control-Allow-Origin", Access-Control-Allow-Credentials, Access-Control-Allow-Methods, Access-Control-Allow-Headers
+CORSDisabled=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 未启用）。
+CORSDidNotSucceed2=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 请求未能成功）。状态码：%2$S。
+CORSOriginHeaderNotAdded=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：无法添加 CORS ‘Origin' 头）。
+CORSExternalRedirectNotAllowed=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：不允许 CORS 请求外部重定向）。
+CORSRequestNotHttp=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 请求不是 http）。
+CORSMissingAllowOrigin2=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 头缺少 'Access-Control-Allow-Origin'）。状态码：%2$S。
+CORSMultipleAllowOriginNotAllowed=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：不允许有多个 'Access-Control-Allow-Origin' CORS 头）。
+CORSAllowOriginNotMatchingOrigin=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 头 'Access-Control-Allow-Origin' 不匹配 '%2$S'）。
+CORSNotSupportingCredentials=已拦截跨源请求：同源策略禁止读取位于 ‘%1$S’ 的远程资源。（原因：凭据不支持，如果 CORS 头 ‘Access-Control-Allow-Origin’ 为 ‘*’）。
+CORSMethodNotFound=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：找不到 CORS 头中的 'Access-Control-Allow-Methods'）。
+CORSMissingAllowCredentials=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 头中的 'Access-Control-Allow-Credentials' 预期为 'true'）。
+CORSPreflightDidNotSucceed3=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 预检响应未能成功）。状态码：%2$S。
+CORSInvalidAllowMethod=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 头 'Access-Control-Allow-Methods' 中的令牌 '%2$S' 无效）。
+CORSInvalidAllowHeader=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 头 'Access-Control-Allow-Headers' 中的令牌 '%2$S' 无效）。\u0020
+CORSMissingAllowHeaderFromPreflight2=已拦截跨源请求：同源策略禁止读取位于 %1$S 的远程资源。（原因：CORS 预检响应的 'Access-Control-Allow-Headers'，不允许使用头 '%2$S'）。
+CORSAllowHeaderFromPreflightDeprecation=跨源请求警告：同源策略即将禁止读取位于 %1$S 的远程资源。（原因：当“Access-Control-Allow-Headers”为“*”时，“Authorization”头并未被包含。若要包含“Authorization”头，则须在 CORS 头“Access-Control-Allow-Headers”中明确列出）。
+
+# LOCALIZATION NOTE: Do not translate "Strict-Transport-Security", "HSTS", "max-age" or "includeSubDomains"
+STSUnknownError=Strict-Transport-Security：处理网站指定的头时发生未知错误。
+STSCouldNotParseHeader=Strict-Transport-Security：网站指定了无法解析的头。
+STSNoMaxAge=Strict-Transport-Security：网站指定的头没有包含“max-age”指示。
+STSMultipleMaxAges=Strict-Transport-Security：网站指定的头包含多个“max-age”指示。
+STSInvalidMaxAge=Strict-Transport-Security：网站指定的头包含一个无效的“max-age”指示。
+STSMultipleIncludeSubdomains=Strict-Transport-Security：网站指定的头包含多个“includeSubDomains”指示。
+STSInvalidIncludeSubdomains=Strict-Transport-Security：网站指定的头包含一个无效的“includeSubDomains”指示。
+STSCouldNotSaveState=严格传输安全：将网站标示为严格传输安全主机时发生错误。
+
+InsecurePasswordsPresentOnPage=不安全的（http://）页面中包含密码栏。这可能有安全风险，会导致用户账号密码被窃取。
+InsecureFormActionPasswordsPresent=有密码栏包含在不安全的（http://）表单发送数据中。这有安全风险，可能导致用户账号密码被窃取。
+InsecurePasswordsPresentOnIframe=有密码栏包含在不安全的（http://）iframe 中。这有安全风险，可能导致用户账号密码被窃取。
+# LOCALIZATION NOTE: "%1$S" is the URI of the insecure mixed content resource
+LoadingMixedActiveContent2=安全页面上在加载混合的（不安全的）活动内容“%1$S”
+LoadingMixedDisplayContent2=在安全的加密网页中加载混合（不安全的）显示内容“%1$S”
+LoadingMixedDisplayObjectSubrequestDeprecation=不建议通过插件在安全页面加载（不安全的）混合内容“%1$S”，该行为即将被禁止。
+# LOCALIZATION NOTE: "%S" is the URI of the insecure mixed content download
+MixedContentBlockedDownload = 已阻止下载不安全的内容“%S”。
+
+# LOCALIZATION NOTE: Do not translate "allow-scripts", "allow-same-origin", "sandbox" or "iframe"
+BothAllowScriptsAndSameOriginPresent=iframe 的“sandbox”属性同时具有“allow-scripts”和“allow-same-origin”值会导致沙盒化的移除。
+# LOCALIZATION NOTE: Do not translate "allow-top-navigation-by-user-activation", "allow-top-navigation", "sandbox" or "iframe"
+BothAllowTopNavigationAndUserActivationPresent=同时含有 allow-top-navigation 与 allow-top-navigation-by-user-activation sandbox 属性的 iframe，将允许导航（加载）内容到顶级的浏览上下文环境。
+
+# Sub-Resource Integrity
+# LOCALIZATION NOTE: Do not translate "script" or "integrity". "%1$S" is the invalid token found in the attribute.
+MalformedIntegrityHash=script 元素中的 integrity 属性散列格式错误：“%1$S”。正确的格式为 “<散列算法>-<散列值>”。
+# LOCALIZATION NOTE: Do not translate "integrity"
+InvalidIntegrityLength=integrity 属性中的散列值长度错误。
+# LOCALIZATION NOTE: Do not translate "integrity"
+InvalidIntegrityBase64=无法解码 integrity 属性中的散列值。
+# LOCALIZATION NOTE: Do not translate "integrity". "%1$S" is the type of hash algorithm in use (e.g. "sha256"). "%2$S" is the value we saw.
+IntegrityMismatch2=integrity 属性中的 “%1$S” 散列值没有一个符合子资源的内容，计算出的散列值为“%2$S”。
+# LOCALIZATION NOTE: "%1$S" is the URI of the sub-resource that cannot be protected using SRI.
+IneligibleResource=因为没有开启 CORS，也没有设置 same-origin，“%1$S”无法用作完整性检查。
+# LOCALIZATION NOTE: Do not translate "integrity". "%1$S" is the invalid hash algorithm found in the attribute.
+UnsupportedHashAlg=integrity 属性中有不支持的散列算法：“%1$S”
+# LOCALIZATION NOTE: Do not translate "integrity"
+NoValidMetadata=integrity 未含任何有效的元数据。
+
+# LOCALIZATION NOTE: Do not translate "RC4".
+WeakCipherSuiteWarning=此网站使用了已弃用且不再安全的 RC4 协议进行加密。
+
+DeprecatedTLSVersion2=该网站使用了已弃用的 TLS 版本。请升级到 TLS 1.2 或 1.3。
+
+#XCTO: nosniff
+# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options: nosniff".
+MimeTypeMismatch2=来自“%1$S”的资源已被阻止，因为 MIME 类型（“%2$S”）不匹配（X-Content-Type-Options: nosniff）。
+# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options" and also do not translate "nosniff".
+XCTOHeaderValueMissing=X-Content-Type-Options 头警告：值是“%1$S”；是否本意为发送“nosniff”？
+# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options" and also do not translate "nosniff".
+XTCOWithMIMEValueMissing=由于 MIME 类型未知、不正确或缺失，未呈现来自“%1$S”的资源（X-Content-Type-Options: nosniff）。
+
+BlockScriptWithWrongMimeType2=已拦截来自“%1$S”的脚本，它使用了不允许的 MIME 类型（“%2$S”）。
+WarnScriptWithWrongMimeType=即使其 MIME 类型（“%2$S”）不是有效的 JavaScript MIME 类型，仍已加载来自“%1$S”的脚本。
+# LOCALIZATION NOTE: Do not translate "importScripts()"
+BlockImportScriptsWithWrongMimeType=已拦截通过 importScripts() 加载的脚本“%1$S”，它使用了不允许的 MIME 类型（“%2$S”）。
+BlockWorkerWithWrongMimeType=已拦截加载自“%1$S”的 Worker，它使用了不允许的 MIME 类型（“%2$S”）。
+BlockModuleWithWrongMimeType=已拦截加载自“%1$S”的模块，它使用了不允许的 MIME 类型（“%2$S”）。
+
+# LOCALIZATION NOTE: Do not translate "data: URI".
+BlockTopLevelDataURINavigation=不允许导航至顶层 data: URI（已阻止加载“%1$S”）
+BlockRedirectToDataURI=不允许重定向至 data: URI（已阻止加载：“%1$S”）
+
+# LOCALIZATION NOTE: Do not translate "file: URI". “%1$S” is the whole URI of the loaded file. “%2$S” is the MIME type e.g. "text/plain".
+BlockFileScriptWithWrongMimeType=从文件加载脚本：由于 URI（“%1$S”）的 MIME 类型（“%2$S”）不是有效的 JavaScript MIME 类型，已将其拦截。
+
+# LOCALIZATION NOTE: “%S” is the whole URI of the loaded file.
+BlockExtensionScriptWithWrongExt=由于是不允许的扩展名，已阻止加载 URI 为“%S”的脚本。
+
+RestrictBrowserEvalUsage=在父进程或系统上下文中不允许使用 eval() 和类似 eval 的用法（“%1$S”中禁止使用）
+
+# LOCALIZATION NOTE (MixedContentAutoUpgrade):
+# %1$S is the URL of the upgraded request; %2$S is the upgraded scheme.
+MixedContentAutoUpgrade=已将不安全的显示请求“%1$S”升级为“%2$S”。
+# LOCALIZATION NOTE (RunningClearSiteDataValue):
+# %S is the URI of the resource whose data was cleaned up
+RunningClearSiteDataValue=收到 Clear-Site-Data 报头，强制清除“%S”数据。
+UnknownClearSiteDataValue=收到 Clear-Site-Data 报头。值“%S”未知。
+
+# Reporting API
+ReportingHeaderInvalidJSON=报告头：收到无效的 JSON 值。
+ReportingHeaderInvalidNameItem=报告头：组名称无效。
+ReportingHeaderDuplicateGroup=报告头：忽略重复的组名称“%S”。
+ReportingHeaderInvalidItem=报告头：忽略无效项目“%S”。
+ReportingHeaderInvalidEndpoint=报告头：忽略项目“%S”的无效端点。
+# LOCALIZATION NOTE(ReportingHeaderInvalidURLEndpoint): %1$S is the invalid URL, %2$S is the group name
+ReportingHeaderInvalidURLEndpoint=报告头：忽略项目“%2$S”的无效端点网址“%1$S”。
+
+FeaturePolicyUnsupportedFeatureName=特性策略：跳过不支持的特性名称“%S”。
+# TODO: would be nice to add a link to the Feature-Policy MDN documentation here. See bug 1449501
+FeaturePolicyInvalidEmptyAllowValue= 特性策略：跳过功能“%S”的空白允许列表。
+# TODO: would be nice to add a link to the Feature-Policy MDN documentation here. See bug 1449501
+FeaturePolicyInvalidAllowValue=特性策略：跳过不支持的允许值“%S”。
+
+# LOCALIZATION NOTE: "%1$S" is the limitation length (bytes) of referrer URI, "%2$S" is the origin of the referrer URI.
+ReferrerLengthOverLimitation=HTTP Referrer 头：超过“%1$S”字节长度限制。将剥离 Referrer 头为 origin：“%2$S”
+# LOCALIZATION NOTE: "%1$S" is the limitation length (bytes) of referrer URI, "%2$S" is the origin of the referrer URI.
+ReferrerOriginLengthOverLimitation=HTTP Referrer 头：超过“%1$S”字节长度限制。将移除带有 origin “%2$S”的 Referrer。
+
+# LOCALIZATION NOTE: Do not translate "no-referrer-when-downgrade", "origin-when-cross-origin" and "unsafe-url". %S is the URI of the loading channel.
+ReferrerPolicyDisallowRelaxingWarning=Referrer 策略：限制较宽松的策略，包括“no-referrer-when-downgrade”、“origin-when-cross-origin”和“unsafe-url”，不久后将被跨站请求忽略：%S
+# LOCALIZATION NOTE: %1$S is the ignored referrer policy, %2$S is the URI of the loading channel.
+ReferrerPolicyDisallowRelaxingMessage=Referrer 策略：针对跨站请求，忽略对其限制较宽松的 referrer 策略 - “%1$S”：%2$S
+
+# X-Frame-Options
+# LOCALIZATION NOTE(XFrameOptionsInvalid): %1$S is the header value, %2$S is frame URI. Do not translate "X-Frame-Options".
+XFrameOptionsInvalid = 加载“%2$S”时发现无效的 X-Frame-Options 头：“%1$S”指令无效。
+# LOCALIZATION NOTE(XFrameOptionsDeny): %1$S is the header value, %2$S is frame URI and %3$S is the parent document URI. Do not translate "X-Frame-Options".
+XFrameOptionsDeny=由于“X-Frame-Options“指令设为“%1$S“，已拒绝在框架中加载“%2$S”。
+
+# HTTPS-Only Mode
+# LOCALIZATION NOTE: %1$S is the URL of the upgraded request; %2$S is the upgraded scheme.
+HTTPSOnlyUpgradeRequest = 已将不安全的请求“%1$S”升级为“%2$S”。
+# LOCALIZATION NOTE: %1$S is the URL of request.
+HTTPSOnlyNoUpgradeException = 由于受到豁免，并未升级不安全的请求“%1$S”。
+# LOCALIZATION NOTE: %1$S is the URL of the failed request; %2$S is an error-code.
+HTTPSOnlyFailedRequest = 不安全的请求“%1$S”升级失败。（%2$S）
+# LOCALIZATION NOTE: %S is the URL of the failed request;
+HTTPSOnlyFailedDowngradeAgain = 升级不安全的请求“%S”失败，再次降级为“http”。
+# LOCALIZATION NOTE: Hints or indicates a new transaction for a URL is likely coming soon. We use
+# a speculative connection to start a TCP connection so that the resource is immediately ready
+# when the transaction is actually submitted. HTTPS-Only and HTTPS-First will upgrade such
+# speculative TCP connections from http to https.
+# %1$S is the URL of the upgraded speculative TCP connection; %2$S is the upgraded scheme.
+HTTPSOnlyUpgradeSpeculativeConnection = 已将不安全的推断式 TCP 连接“%1$S”升级至使用“%2$S”协议。
+
+HTTPSFirstSchemeless = 已将地址栏中加载的，没有明确协议方案的网址升级为使用 HTTPS。
+
+# LOCALIZATION NOTE: %S is the URL of the blocked request;
+IframeSandboxBlockedDownload = 由于所触发 iframe 设置了沙箱标识，已阻止“%S”进行下载。
+
+# LOCALIZATION NOTE: %S is the URL of the blocked request;
+SandboxBlockedCustomProtocols = 已拦截从沙盒上下文导航至自定义协议网址“%S”的请求。
+
+# Sanitizer API
+# LOCALIZATION NOTE: Please do not localize "DocumentFragment". It's the name of an API.
+SanitizerRcvdNoInput = 收到空或无输入，返回空的 DocumentFragment。