From c3a4ce79cb1435404a0362a9e47a104da44bdcf6 Mon Sep 17 00:00:00 2001 From: Blake Erickson Date: Mon, 21 Aug 2023 13:58:41 -0600 Subject: [PATCH] DEV: Add CSP to setting descriptions (#23172) In an effort to aid in the searchability of Content-Security-Policy related site settings this commit is appending "CSP" to several `content_security_policy_` site setting descriptions. --- config/locales/server.en.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/config/locales/server.en.yml b/config/locales/server.en.yml index 80ec2c06df8..2b9b6cd9ca8 100644 --- a/config/locales/server.en.yml +++ b/config/locales/server.en.yml @@ -1672,11 +1672,11 @@ en: blocked_crawler_user_agents: "Unique case insensitive word in the user agent string identifying web crawlers that should not be allowed to access the site. Does not apply if allowlist is defined." slow_down_crawler_user_agents: 'User agents of web crawlers that should be rate limited as configured in the "slow down crawler rate" setting. Each value must be at least 3 characters long.' slow_down_crawler_rate: "If slow_down_crawler_user_agents is specified this rate will apply to all the crawlers (number of seconds delay between requests)" - content_security_policy: "Enable Content-Security-Policy" - content_security_policy_report_only: "Enable Content-Security-Policy-Report-Only" + content_security_policy: "Enable Content-Security-Policy (CSP)" + content_security_policy_report_only: "Enable Content-Security-Policy-Report-Only (CSP)" content_security_policy_collect_reports: "Enable CSP violation report collection at /csp_reports" content_security_policy_frame_ancestors: "Restrict who can embed this site in iframes via CSP. Control allowed hosts on Embedding" - content_security_policy_script_src: "Additional allowlisted script sources. The current host and CDN are included by default. See Mitigate XSS Attacks with Content Security Policy." + content_security_policy_script_src: "Additional allowlisted script sources. The current host and CDN are included by default. See Mitigate XSS Attacks with Content Security Policy. (CSP)" invalidate_inactive_admin_email_after_days: "Admin accounts that have not visited the site in this number of days will need to re-validate their email address before logging in. Set to 0 to disable." include_secure_categories_in_tag_counts: "When enabled, count of topics for a tag will include topics that are in read restricted categories for all users. When disabled, normal users are only shown a count of topics for a tag where all the topics are in public categories." display_personal_messages_tag_counts: "When enabled, count of personal messages tagged with a given tag will be displayed."