diff --git a/core/audits/trusted-types-xss.js b/core/audits/trusted-types-xss.js index f0f15c216f18..6cec68abd83b 100644 --- a/core/audits/trusted-types-xss.js +++ b/core/audits/trusted-types-xss.js @@ -18,7 +18,7 @@ const UIStrings = { description: 'The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header ' + 'instructs user agents to control the data passed to DOM XSS sink functions. ' + - '[Learn more about mitigating DOM-based XSS with Trusted Types](https://web.dev/articles/trusted-types).', + '[Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).', /** Summary text for the results of a Lighthouse audit that evaluates whether the set CSP header and Trusted Types directive is mitigating DOM-based XSS. This text is displayed if the page does not respond with a CSP header and a Trusted Types directive. "CSP" stands for "Content-Security-Policy" and should not be translated. "XSS" stands for "Cross Site Scripting" and should not be translated. */ noTrustedTypesToMitigateXss: 'No `Content-Security-Policy` header with Trusted Types directive found', diff --git a/core/test/fixtures/user-flows/reports/sample-flow-result.json b/core/test/fixtures/user-flows/reports/sample-flow-result.json index f2fe9425c43f..8ac9b7b3b08a 100644 --- a/core/test/fixtures/user-flows/reports/sample-flow-result.json +++ b/core/test/fixtures/user-flows/reports/sample-flow-result.json @@ -2265,7 +2265,7 @@ "trusted-types-xss": { "id": "trusted-types-xss", "title": "Mitigate DOM-based XSS with Trusted Types", - "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://web.dev/articles/trusted-types).", + "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).", "score": 1, "scoreDisplayMode": "informative", "details": { @@ -24588,7 +24588,7 @@ "trusted-types-xss": { "id": "trusted-types-xss", "title": "Mitigate DOM-based XSS with Trusted Types", - "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://web.dev/articles/trusted-types).", + "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).", "score": 1, "scoreDisplayMode": "informative", "details": { diff --git a/core/test/results/sample_v2.json b/core/test/results/sample_v2.json index 9e2bc9e1993f..bbaed4a94425 100644 --- a/core/test/results/sample_v2.json +++ b/core/test/results/sample_v2.json @@ -2781,7 +2781,7 @@ "trusted-types-xss": { "id": "trusted-types-xss", "title": "Mitigate DOM-based XSS with Trusted Types", - "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://web.dev/articles/trusted-types).", + "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).", "score": 1, "scoreDisplayMode": "informative", "details": { diff --git a/shared/localization/locales/en-US.json b/shared/localization/locales/en-US.json index e136c1aba6c2..c28497a3462a 100644 --- a/shared/localization/locales/en-US.json +++ b/shared/localization/locales/en-US.json @@ -1497,7 +1497,7 @@ "message": "Severity" }, "core/audits/trusted-types-xss.js | description": { - "message": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://web.dev/articles/trusted-types)." + "message": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss)." }, "core/audits/trusted-types-xss.js | noTrustedTypesToMitigateXss": { "message": "No `Content-Security-Policy` header with Trusted Types directive found" diff --git a/shared/localization/locales/en-XL.json b/shared/localization/locales/en-XL.json index 2e02c66a055d..c370e7a9e00d 100644 --- a/shared/localization/locales/en-XL.json +++ b/shared/localization/locales/en-XL.json @@ -1497,7 +1497,7 @@ "message": "Ŝév̂ér̂ít̂ý" }, "core/audits/trusted-types-xss.js | description": { - "message": "T̂h́ê `require-trusted-types-for` d́îŕêćt̂ív̂é îń t̂h́ê `Content-Security-Policy` (ĆŜṔ) ĥéâd́êŕ îńŝt́r̂úĉt́ŝ úŝér̂ áĝén̂t́ŝ t́ô ćôńt̂ŕôĺ t̂h́ê d́ât́â ṕâśŝéd̂ t́ô D́ÔḾ X̂ŚŜ śîńk̂ f́ûńĉt́îón̂ś. [L̂éâŕn̂ ḿôŕê áb̂óût́ m̂ít̂íĝát̂ín̂ǵ D̂ÓM̂-b́âśêd́ X̂ŚŜ ẃît́ĥ T́r̂úŝt́êd́ T̂ýp̂éŝ](https://web.dev/articles/trusted-types)." + "message": "T̂h́ê `require-trusted-types-for` d́îŕêćt̂ív̂é îń t̂h́ê `Content-Security-Policy` (ĆŜṔ) ĥéâd́êŕ îńŝt́r̂úĉt́ŝ úŝér̂ áĝén̂t́ŝ t́ô ćôńt̂ŕôĺ t̂h́ê d́ât́â ṕâśŝéd̂ t́ô D́ÔḾ X̂ŚŜ śîńk̂ f́ûńĉt́îón̂ś. [L̂éâŕn̂ ḿôŕê áb̂óût́ m̂ít̂íĝát̂ín̂ǵ D̂ÓM̂-b́âśêd́ X̂ŚŜ ẃît́ĥ T́r̂úŝt́êd́ T̂ýp̂éŝ](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss)." }, "core/audits/trusted-types-xss.js | noTrustedTypesToMitigateXss": { "message": "N̂ó `Content-Security-Policy` ĥéâd́êŕ ŵít̂h́ T̂ŕûśt̂éd̂ T́ŷṕêś d̂ír̂éĉt́îv́ê f́ôún̂d́"