3 files changed, 301 insertions, 0 deletions
diff --git a/l10n-zh-TW/dom/chrome/security/caps.properties b/l10n-zh-TW/dom/chrome/security/caps.properties
new file mode 100644
index 0000000000..ab50d37edd
--- /dev/null
+++ b/l10n-zh-TW/dom/chrome/security/caps.properties
@@ -0,0 +1,9 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+CheckLoadURIError = 安全性錯誤: %S 的內容無法由 %S 載入資料或鏈結。
+CheckSameOriginError = 安全性錯誤: %S 的內容無法由 %S 載入資料。
+ExternalDataError = 安全性錯誤: 位於 %S 的內容嘗試載入 %S，但作為圖片使用時不應載入外部資料。 
+
+CreateWrapperDenied = 權限不足以建立 class %S 物件的 wrapper
+CreateWrapperDeniedForOrigin = <%2$S> 權限不足，無法建立 Class %1$S 物件的 wrapper。
diff --git a/l10n-zh-TW/dom/chrome/security/csp.properties b/l10n-zh-TW/dom/chrome/security/csp.properties
new file mode 100644
index 0000000000..3d70e3ebaa
--- /dev/null
+++ b/l10n-zh-TW/dom/chrome/security/csp.properties
@@ -0,0 +1,123 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+# CSP Warnings:
+# LOCALIZATION NOTE (CSPViolation):
+# %1$S is the reason why the resource has not been loaded.
+CSPViolation = 頁面的設定阻擋了資源載入: %1$S
+# LOCALIZATION NOTE (CSPViolationWithURI):
+# %1$S is the directive that has been violated.
+# %2$S is the URI of the resource which violated the directive.
+CSPViolationWithURI = 頁面的設定阻擋了 %2$S 的資源載入:（「%1$S」）。
+# LOCALIZATION NOTE (CSPROViolation):
+# %1$S is the reason why the resource has not been loaded.
+CSPROViolation = report-only 的 CSP 政策 ("%1$S") 發生了違規。行為已被允許，且已送出 CSP 報告。
+# LOCALIZATION NOTE (CSPROViolationWithURI):
+# %1$S is the directive that has been violated.
+# %2$S is the URI of the resource which violated the directive.
+CSPROViolationWithURI = 根據 %2$S 的頁面設定觀察到載入資源 ("%1$S")。將送出 CSP 回報。
+# LOCALIZATION NOTE (triedToSendReport):
+# %1$S is the URI we attempted to send a report to.
+triedToSendReport = 嘗試傳送報表至無效 URI:「%1$S」
+# LOCALIZATION NOTE (couldNotParseReportURI):
+# %1$S is the report URI that could not be parsed
+couldNotParseReportURI = 無法剖析回報 URI: %1$S
+# LOCALIZATION NOTE (couldNotProcessUnknownDirective):
+# %1$S is the unknown directive
+couldNotProcessUnknownDirective = 無法處理未知指示「%1$S」
+# LOCALIZATION NOTE (ignoringUnknownOption):
+# %1$S is the option that could not be understood
+ignoringUnknownOption = 忽略未知的選項 %1$S
+# LOCALIZATION NOTE (ignoringDuplicateSrc):
+# %1$S defines the duplicate src
+ignoringDuplicateSrc = 忽略重複的來源 %1$S
+# LOCALIZATION NOTE (ignoringNonAsciiToken):
+# %1$S defines the name of the directive
+# %2$S is the token string containing non-ASCII characters.
+ignoringNonAsciiToken = 忽略含有非 ASCII 字元「%2$S」的指令「%1$S」
+# LOCALIZATION NOTE (ignoringSrcFromMetaCSP):
+# %1$S defines the ignored src
+ignoringSrcFromMetaCSP = 忽略來源「%1$S」（不支援透過 meta 元素提供）。
+# LOCALIZATION NOTE (ignoringSrcWithinScriptStyleSrc):
+# %1$S is the ignored src
+# script-src and style-src are directive names and should not be localized
+ignoringSrcWithinScriptStyleSrc = 忽略 script-src 或 style-src 當中的「%1$S」: 指定了 nonce-source 或 hash-source
+# LOCALIZATION NOTE (ignoringSrcForStrictDynamic):
+# %1$S is the ignored src
+# script-src, as well as 'strict-dynamic' should not be localized
+ignoringSrcForStrictDynamic = 忽略來自 script-src 的「%1$S」: 已指定「strict-dynamic」
+# LOCALIZATION NOTE (ignoringSrcWithinNonceOrHashDirective):
+# %1$S is the ignored src (e.g. "unsafe-inline")
+# %2$S is the directive (e.g. "script-src-elem")
+ignoringSrcWithinNonceOrHashDirective = 忽略 %2$S 當中的「%1$S」：指定了 nonce-source 或 hash-source
+# LOCALIZATION NOTE (ignoringScriptSrcForStrictDynamic):
+# %1$S is the ignored src
+# %1$S is the directive src (e.g. "script-src-elem")
+# 'strict-dynamic' should not be localized
+ignoringScriptSrcForStrictDynamic = 忽略 %2$S 當中的「%1$S」：指定了「strict-dynamic」
+# LOCALIZATION NOTE (ignoringStrictDynamic):
+# %1$S is the ignored src
+ignoringStrictDynamic = 忽略來源「%1$S」（僅支援來自 script-src 的來源）。 
+# LOCALIZATION NOTE (ignoringUnsafeEval):
+# %1$S is the csp directive (e.g. script-src-elem)
+# 'unsafe-eval' and 'wasm-unsafe-eval' should not be localized
+ignoringUnsafeEval = 忽略「%1$S」當中的「unsafe-eval」或「wasm-unsafe-eval」。
+# LOCALIZATION NOTE (strictDynamicButNoHashOrNonce):
+# %1$S is the csp directive that contains 'strict-dynamic'
+# 'strict-dynamic' should not be localized
+strictDynamicButNoHashOrNonce = 「%1$S」當中不含有效 nonce 或雜湊的 ‘strict-dynamic’ 關鍵字可能會封鎖所有指令碼載入
+# LOCALIZATION NOTE (reportURInotHttpsOrHttp2):
+# %1$S is the ETLD of the report URI that is not HTTP or HTTPS
+reportURInotHttpsOrHttp2 = 回報網址 (%1$S) 應為 HTTP 或 HTTPS 網址。
+# LOCALIZATION NOTE (reportURInotInReportOnlyHeader):
+# %1$S is the ETLD of the page with the policy
+reportURInotInReportOnlyHeader = 此網站 (%1$S) 含有 Report-Only 政策卻沒有回報網址。CSP 將不會封鎖，且無法回報此政策違反。
+# LOCALIZATION NOTE (failedToParseUnrecognizedSource):
+# %1$S is the CSP Source that could not be parsed
+failedToParseUnrecognizedSource = 無法剖析未知的來源 %1$S
+# LOCALIZATION NOTE (upgradeInsecureRequest):
+# %1$S is the URL of the upgraded request; %2$S is the upgraded scheme.
+upgradeInsecureRequest = 已將不安全的請求「%1$S」升級使用「%2$S」通訊協定
+# LOCALIZATION NOTE (ignoreSrcForDirective):
+ignoreSrcForDirective = 忽略「%1$S」指示的 srcs
+# LOCALIZATION NOTE (hostNameMightBeKeyword):
+# %1$S is the hostname in question and %2$S is the keyword
+hostNameMightBeKeyword = 將 %1$S 解譯為主機名稱而非關鍵字。若您刻意要將其設為關鍵字，請改用 '%2$S'（用單引號包起來）。
+# LOCALIZATION NOTE (notSupportingDirective):
+# directive is not supported (e.g. 'reflected-xss')
+notSupportingDirective = 不支援指示「%1$S」，將忽略該指示與指示值。
+# LOCALIZATION NOTE (blockAllMixedContent):
+# %1$S is the URL of the blocked resource load.
+blockAllMixedContent = 封鎖不安全的請求「%1$S」。
+# LOCALIZATION NOTE (ignoringDirectiveWithNoValues):
+# %1$S is the name of a CSP directive that requires additional values
+ignoringDirectiveWithNoValues = 由於不含任何參數，忽略「%1$S」。
+# LOCALIZATION NOTE (ignoringReportOnlyDirective):
+# %1$S is the directive that is ignored in report-only mode.
+ignoringReportOnlyDirective = 在以唯讀政策「%1$S」傳遞時，忽略沙盒指示
+# LOCALIZATION NOTE (IgnoringSrcBecauseOfDirective):
+# %1$S is the name of the src that is ignored.
+# %2$S is the name of the directive that causes the src to be ignored.
+IgnoringSrcBecauseOfDirective=由於有「%2$S」指示，將忽略「%1$S」。
+# LOCALIZATION NOTE (IgnoringSourceWithinDirective):
+# %1$S is the ignored src
+# %2$S is the directive  which supports src
+IgnoringSourceWithinDirective = 忽略來源「%1$S」（不支援於「%2$S」當中）。
+
+# CSP Errors:
+# LOCALIZATION NOTE (couldntParseInvalidSource):
+# %1$S is the source that could not be parsed
+couldntParseInvalidSource = 無法剖析無效來源 %1$S
+# LOCALIZATION NOTE (couldntParseInvalidHost):
+# %1$S is the host that's invalid
+couldntParseInvalidHost = 無法剖析無效主機 %1$S
+# LOCALIZATION NOTE (couldntParsePort):
+# %1$S is the string source
+couldntParsePort = 無法剖析 %1$S 當中的埠號
+# LOCALIZATION NOTE (duplicateDirective):
+# %1$S is the name of the duplicate directive
+duplicateDirective = 偵測到重複的 %1$S 指示。將忽略第一個以外的指示。
+# LOCALIZATION NOTE (couldntParseInvalidSandboxFlag):
+# %1$S is the option that could not be understood
+couldntParseInvalidSandboxFlag = 無法剖析無效的沙盒旗標「%1$S」
diff --git a/l10n-zh-TW/dom/chrome/security/security.properties b/l10n-zh-TW/dom/chrome/security/security.properties
new file mode 100644
index 0000000000..9b4cba705f
--- /dev/null
+++ b/l10n-zh-TW/dom/chrome/security/security.properties
@@ -0,0 +1,169 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+# Mixed Content Blocker
+# LOCALIZATION NOTE: "%1$S" is the URI of the blocked mixed content resource
+BlockMixedDisplayContent = 已封鎖載入混和的顯示內容「%1$S」
+BlockMixedActiveContent = 已封鎖載入混和的主動內容「%1$S」
+
+# CORS
+# LOCALIZATION NOTE: Do not translate "Access-Control-Allow-Origin", Access-Control-Allow-Credentials, Access-Control-Allow-Methods, Access-Control-Allow-Headers
+CORSDisabled=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: 已停用 CORS）。
+CORSDidNotSucceed2=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 請求未成功）。狀態代碼: %2$S。
+CORSOriginHeaderNotAdded=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: 無法新增 CORS 'Origin' 檔頭）。
+CORSExternalRedirectNotAllowed=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: 不允許 CORS 請求被重導到外部）。
+CORSRequestNotHttp=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 請求未使用 http 通訊協定）。
+CORSMissingAllowOrigin2=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: 缺少 CORS 'Access-Control-Allow-Origin' 檔頭）。狀態代碼: %2$S。
+CORSMultipleAllowOriginNotAllowed=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: 不允許有多個「Access-Control-Allow-Origin」CORS 標頭）。
+CORSAllowOriginNotMatchingOrigin=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 'Access-Control-Allow-Origin' 檔頭不符合「%2$S」）。
+CORSNotSupportingCredentials=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 'Access-Control-Allow-Origin' 設定為「*」時不支援使用帳號密碼）。
+CORSMethodNotFound=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 'Access-Control-Allow-Methods' 檔頭中找不到方法）。
+CORSMissingAllowCredentials=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 'Access-Control-Allow-Credentials' 檔頭應為 'true'）。
+CORSPreflightDidNotSucceed3=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS preflight 回應並未成功）。狀態代碼: %2$S。
+CORSInvalidAllowMethod=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 'Access-Control-Allow-Methods' 檔頭中的 token「%2$S」無效）。
+CORSInvalidAllowHeader=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: CORS 'Access-Control-Allow-Headers' 檔頭中的 token「%2$S」無效）。
+CORSMissingAllowHeaderFromPreflight2=已封鎖跨來源請求: 同源政策不允許讀取 %1$S 的遠端資源。（原因: 根據 CORS preflight 回應的 'Access-Control-Allow-Headers' 內容，不允許使用檔頭「%2$S」）。
+
+# LOCALIZATION NOTE: Do not translate "Strict-Transport-Security", "HSTS", "max-age" or "includeSubDomains"
+STSUnknownError=Strict-Transport-Security: 處理網站回傳的檔頭時發生未知的錯誤。
+STSUntrustworthyConnection=Strict-Transport-Security: 與網站間的連線不可靠，忽略回傳的檔頭。
+STSCouldNotParseHeader=Strict-Transport-Security: 網站回傳了一個無法被剖析的檔頭。
+STSNoMaxAge=Strict-Transport-Security: 網站回傳了一個不包含 ‘max-age’ 指示的檔頭。
+STSMultipleMaxAges=Strict-Transport-Security: 網站回傳了包含多個 ‘max-age’ 指示的檔頭。
+STSInvalidMaxAge=Strict-Transport-Security: 網站回傳了一個包含無效 ‘max-age’ 指示的檔頭。
+STSMultipleIncludeSubdomains=Strict-Transport-Security: 網站回傳了包含多個 ‘includeSubDomains’ 指示的檔頭。
+STSInvalidIncludeSubdomains=Strict-Transport-Security: 網站回傳了一個包含無效 ‘includeSubDomains’ 指示的檔頭。
+STSCouldNotSaveState=Strict-Transport-Security: 將網站標示為 Strict-Transport-Security 主機時發生錯誤。
+
+InsecurePasswordsPresentOnPage=不安全 (http://) 的頁面中包含了密碼欄位，這可能會是個讓帳號密碼被盜取的安全性風險。
+InsecureFormActionPasswordsPresent=不安全 (http://) 的表單發送行為中包含了密碼欄位，這可能會是個讓帳號密碼被盜取的安全性風險。
+InsecurePasswordsPresentOnIframe=不安全 (http://) 的 iframe 中包含了密碼欄位，這可能會是個讓帳號密碼被盜取的安全性風險。
+# LOCALIZATION NOTE: "%1$S" is the URI of the insecure mixed content resource
+LoadingMixedActiveContent2=在安全的加密網頁中載入混合（不安全的）主動式內容「%1$S」
+LoadingMixedDisplayContent2=在安全的加密網頁中載入混合（不安全的）顯示內容「%1$S」
+LoadingMixedDisplayObjectSubrequestDeprecation=不建議透過外掛程式在安全頁面載入混合（不安全）的內容「%1$S」，這個行為即將被封鎖。
+# LOCALIZATION NOTE: "%S" is the URI of the insecure mixed content download
+MixedContentBlockedDownload = 已封鎖下載不安全的內容「%S」。
+
+# LOCALIZATION NOTE: Do not translate "allow-scripts", "allow-same-origin", "sandbox" or "iframe"
+BothAllowScriptsAndSameOriginPresent=同時包含 allow-scripts 與 allow-same-origin 兩個 sandbox 屬性的 iframe 的 sandbox 功能會被移除。
+# LOCALIZATION NOTE: Do not translate "allow-top-navigation-by-user-activation", "allow-top-navigation", "sandbox" or "iframe"
+BothAllowTopNavigationAndUserActivationPresent=同時含有 allow-top-navigation 與 allow-top-navigation-by-user-activation sandbox 屬性的 iframe，將允許頂層瀏覽。
+
+# Sub-Resource Integrity
+# LOCALIZATION NOTE: Do not translate "script" or "integrity". "%1$S" is the invalid token found in the attribute.
+MalformedIntegrityHash=script 元素中的 integrity 屬性雜湊值格式錯誤:「%1$S」。正確的格式為「<雜湊演算法>-<雜湊值>」。
+# LOCALIZATION NOTE: Do not translate "integrity"
+InvalidIntegrityLength=integrity 屬性中的雜湊值長度錯誤。
+# LOCALIZATION NOTE: Do not translate "integrity"
+InvalidIntegrityBase64=無法解碼 integrity 屬性中的雜湊值。
+# LOCALIZATION NOTE: Do not translate "integrity". "%1$S" is the type of hash algorithm in use (e.g. "sha256").
+IntegrityMismatch=integrity 屬性中的「%1$S」雜湊值沒有一個符合子資源的內容。
+# LOCALIZATION NOTE: "%1$S" is the URI of the sub-resource that cannot be protected using SRI.
+IneligibleResource=因為並未開啟 CORS，也沒有設定 same-origin，「%1$S」無法用作完整性檢查。
+# LOCALIZATION NOTE: Do not translate "integrity". "%1$S" is the invalid hash algorithm found in the attribute.
+UnsupportedHashAlg=integrity 屬性中有不支援的雜湊演算法:「%1$S」
+# LOCALIZATION NOTE: Do not translate "integrity"
+NoValidMetadata=integrity 未含任何有效的後設資料。
+
+# LOCALIZATION NOTE: Do not translate "RC4".
+WeakCipherSuiteWarning=此網站使用已棄用且不安全的 RC4 演算法進行加密。
+
+DeprecatedTLSVersion2=此網站使用了已棄用的 TLS 通訊協定版本，請升級到 TLS 1.2 或 1.3。
+
+#XCTO: nosniff
+# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options: nosniff".
+MimeTypeMismatch2=MIME 類型（「%2$S」）不符合，所以來自「%1$S」的資源被封鎖（X-Content-Type-Options: nosniff）。
+# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options" and also do not translate "nosniff".
+XCTOHeaderValueMissing=X-Content-Type-Options 標頭警告: 此值原本為「%1$S」；您是不是要傳「nosniff」？
+# LOCALIZATION NOTE: Do not translate "X-Content-Type-Options" and also do not translate "nosniff".
+XTCOWithMIMEValueMissing=由於缺少 MIME 類型、類型未知或不正確，並未描繪來自「%1$S」的資源（X-Content-Type-Options: nosniff）。
+
+BlockScriptWithWrongMimeType2=因為使用了未允許的 MIME 類型（「%2$S」），已封鎖來自「%1$S」的指令碼。
+WarnScriptWithWrongMimeType=即使 MIME 類型（「%2$S」）不是有效的 JavaScript MIME 類型，仍已載入來自「%1$S」的指令碼。
+# LOCALIZATION NOTE: Do not translate "importScripts()"
+BlockImportScriptsWithWrongMimeType=因為使用了未允許的 MIME 類型（「%2$S」），已封鎖透過 importScripts() 載入的指令碼「%1$S」。
+BlockWorkerWithWrongMimeType=因為使用了未允許的 MIME 類型（「%2$S」），已封鎖載入來自「%1$S」的 Worker。
+BlockModuleWithWrongMimeType=因為使用了未允許的 MIME 類型（「%2$S」），已封鎖載入來自「%1$S」的模組。
+
+# LOCALIZATION NOTE: Do not translate "data: URI".
+BlockTopLevelDataURINavigation=不允許瀏覽頂層資料: 不允許的 URI（「%1$S」載入被封鎖）
+BlockSubresourceRedirectToData=重導到不安全的資料: 不受允許的 URI（已封鎖載入「%1$S」）
+
+BlockSubresourceFTP=不允許在 HTTP(s) 頁面中載入 FTP 子資源（封鎖載入:「%1$S」）
+
+# LOCALIZATION NOTE: Do not translate "file: URI". “%1$S” is the whole URI of the loaded file. “%2$S” is the MIME type e.g. "text/plain".
+BlockFileScriptWithWrongMimeType=從檔案載入指令碼: 由於 URI（「%1$S」）的 MIME 類型（「%2$S」）不是有效的 JavaScript MIME 類型，已封鎖該檔案。
+
+# LOCALIZATION NOTE: “%S” is the whole URI of the loaded file.
+BlockExtensionScriptWithWrongExt=由於是不允許的副檔名，已封鎖載入「%S」指令碼資源。
+
+RestrictBrowserEvalUsage=父程序或系統環境中，不允許使用 eval() 或類似 eval 的用法（已封鎖「%1$S」的用法）
+
+# LOCALIZATION NOTE (MixedContentAutoUpgrade):
+# %1$S is the URL of the upgraded request; %2$S is the upgraded scheme.
+MixedContentAutoUpgrade=已將不安全的顯示請求「%1$S」升級使用「%2$S」通訊協定
+# LOCALIZATION NOTE (RunningClearSiteDataValue):
+# %S is the URI of the resource whose data was cleaned up
+RunningClearSiteDataValue=收到 Clear-Site-Data 檔頭，強制清除「%S」資料。
+UnknownClearSiteDataValue=收到 Clear-Site-Data 檔頭，值「%S」未知。
+
+# Reporting API
+ReportingHeaderInvalidJSON=報告標頭: 收到無效的 JSON 值。
+ReportingHeaderInvalidNameItem=報告標頭: 群組名稱無效。
+ReportingHeaderDuplicateGroup=報告標頭: 忽略重複的群組名稱「%S」。
+ReportingHeaderInvalidItem=報告標頭: 忽略無效項目「%S」。
+ReportingHeaderInvalidEndpoint=報告標頭: 忽略項目「%S」的無效端點。
+# LOCALIZATION NOTE(ReportingHeaderInvalidURLEndpoint): %1$S is the invalid URL, %2$S is the group name
+ReportingHeaderInvalidURLEndpoint=報告標頭: 忽略項目「%2$S」的無效端點網址「%1$S」。
+
+FeaturePolicyUnsupportedFeatureName=功能政策: 忽略不支援的功能名稱「%S」。
+# TODO: would be nice to add a link to the Feature-Policy MDN documentation here. See bug 1449501
+FeaturePolicyInvalidEmptyAllowValue= 功能政策: 忽略功能「%S」的空白允許清單。
+# TODO: would be nice to add a link to the Feature-Policy MDN documentation here. See bug 1449501
+FeaturePolicyInvalidAllowValue=功能政策: 忽略不支援的允許值「%S」。
+
+# LOCALIZATION NOTE: "%1$S" is the limitation length (bytes) of referrer URI, "%2$S" is the origin of the referrer URI.
+ReferrerLengthOverLimitation=HTTP Referrer 標頭: 長度超過「%1$S」位元組限制。將縮短 Referrer 標頭為 origin:「%2$S」
+# LOCALIZATION NOTE: "%1$S" is the limitation length (bytes) of referrer URI, "%2$S" is the origin of the referrer URI.
+ReferrerOriginLengthOverLimitation=HTTP Referrer 標頭: origin 長度超過「%1$S」位元組限制。將移除 origin「%2$S」的 Referrer 標頭。
+
+# LOCALIZATION NOTE: Do not translate "no-referrer-when-downgrade", "origin-when-cross-origin" and "unsafe-url". %S is the URI of the loading channel.
+ReferrerPolicyDisallowRelaxingWarning=參照政策: 發出下列跨網站請求時，較不嚴格的策略，包含「no-referrer-when-downgrade」、「origin-when-cross-origin」及「unsafe-url」即將被忽略: %S
+# LOCALIZATION NOTE: %1$S is the ignored referrer policy, %2$S is the URI of the loading channel.
+ReferrerPolicyDisallowRelaxingMessage=參照政策: 忽略對 %2$S 的跨網站請求中，較不嚴格的參照策略「%1$S」
+
+# X-Frame-Options
+# LOCALIZATION NOTE(XFrameOptionsInvalid): %1$S is the header value, %2$S is frame URI. Do not translate "X-Frame-Options".
+XFrameOptionsInvalid = 載入「%2$S」時發現無效的 X-Frame-Options 檔頭:「%1$S」指示無效。
+# LOCALIZATION NOTE(XFrameOptionsDeny): %1$S is the header value, %2$S is frame URI and %3$S is the parent document URI. Do not translate "X-Frame-Options".
+XFrameOptionsDeny=由於「X-Frame-Options」指示設定為「%1$S」，已拒絕在畫框中載入「%2$S」。
+
+# HTTPS-Only Mode
+# LOCALIZATION NOTE: %1$S is the URL of the upgraded request; %2$S is the upgraded scheme.
+HTTPSOnlyUpgradeRequest = 已將不安全的請求「%1$S」升級使用「%2$S」通訊協定。
+# LOCALIZATION NOTE: %1$S is the URL of request.
+HTTPSOnlyNoUpgradeException = 由於可豁免升級，並未升級不安全的請求「%1$S」。
+# LOCALIZATION NOTE: %1$S is the URL of the failed request; %2$S is an error-code.
+HTTPSOnlyFailedRequest = 不安全的請求「%1$S」升級失敗。（%2$S）
+# LOCALIZATION NOTE: %S is the URL of the failed request;
+HTTPSOnlyFailedDowngradeAgain = 不安全的連線請求「%S」升級失敗，再次降級為「http」通訊協定。
+# LOCALIZATION NOTE: Hints or indicates a new transaction for a URL is likely coming soon. We use
+# a speculative connection to start a TCP connection so that the resource is immediately ready
+# when the transaction is actually submitted. HTTPS-Only and HTTPS-First will upgrade such
+# speculative TCP connections from http to https.
+# %1$S is the URL of the upgraded speculative TCP connection; %2$S is the upgraded scheme.
+HTTPSOnlyUpgradeSpeculativeConnection = 已將不安全的推測式 TCP 預先連線「%1$S」升級使用「%2$S」通訊協定。
+
+# LOCALIZATION NOTE: %S is the URL of the blocked request;
+IframeSandboxBlockedDownload = 由於觸發的 iframe 設定了 sandbox 旗標，已封鎖下載「%S」。
+
+# LOCALIZATION NOTE: %S is the URL of the blocked request;
+SandboxBlockedCustomProtocols = 已封鎖從沙盒環境導航到自訂通訊協定網址「%S」的請求。
+
+# Sanitizer API
+# LOCALIZATION NOTE: Please do not localize "DocumentFragment". It's the name of an API.
+SanitizerRcvdNoInput = 收到空白或無輸入資訊，回傳空白的 DocumentFragment。
+# LOCALIZATION NOTE: "Sanitizer" is the name of the API. Please do not localize.
+SanitizerOptionsDiscarded = 還不支援 Sanitizer 建構子的選項，請注意這還是實驗中的行為。