msedge-error-codes.txt

Code Prefix
Area
Description
CSP143xx
Content Security Policy
Resources blocked by the use of a Content-Security-Policy HTTP header.
CSS31xx
Stylesheets
Errors related to Web Open Font Format (WOFF) and Embedded OpenType (EOT) font source and host server problems.
HTML1112-1300
HTML
Most of these are legacy codes specific to Internet Explorer concepts such as Document Mode and Compatibility View
HTML1400-1532
HTML5 parsing
Validation warnings thrown by the HTML5 parser.
HTTP
Server errors and status
Codes returned from remote servers in response to HTTP requests.
SCRIPT10xx
JavaScript syntax errors
Occur when the structure of one of your JavaScript statements violates one or more of the syntactic rules.
SCRIPT50xx
JavaScript runtime errors
Occur when your script attempts to perform an action that the system cannot execute.
SEC71xx
Security
Reflect security conditions that Microsoft Edge enforces, such as Mixed Content and Tracking Protection.
SVG560x
Scalable Vector Graphics
doesn't currently support extensive SVG debugging, but some console messages are provided for debugging purposes.
WebGL11_xxx
WebGL
Error messages from the WebGL context. See also GLSL errors.
XML5xxx
XML
Errors with XML parsing and validation.
CSP codes
Resources blocked by the use of a Content-Security-Policy HTTP header are reported through the DevTools Console and optionally as a report back to the server.
Code
Message
Description
Suggested fix
CSP14301
“Failed parsing [the policy type] because <the reason for canceling the operation> -- policy will be ignored.”
The security policy type specified (ie. script-src, base-uri, etc) failed for the reason identified and will be ignored.
Be sure to list all required resources of a specific type in a single directive. For example, in this: script-src https://host1.com; script-src https://host2.com the second directive would be ignored. The following would correctly specify both origins as valid: script-src https://host1.com https://host2.com.
CSP14302
"Failed parsing source in[policy type] for directive[directive type] at [source URL] -- source will be ignored."
Most CSP directives require one or more content sources (indicating a URL that content can be loaded from). This error points out a policy with a directive that contains a source URL that failed when parsing was attempted.
Check the content source (most often a URL) that is defined in the specified directive which you can find in the specified policy type. Correct or replace the source URL or remove the directive. 
*Your policy should include a default-src policy directive, which is a fallback for other resource types when they don't have policies of their own.
CSP14303
"[Policy type] policy was empty."
The policy type (ie. Content-Security-Policy in the HTTP header) is empty.
A quick reference for setting up a Content Security Policy can be found at http://content-security-policy.com/
CSP14304
"Unknown source [source URL] for directive [directive type] in [policy type] source will be ignored."
The sources for approved (safe) content in the directive identified are unknown and will be ignored.
Check the content source identified (often this is a URL) to be sure it is correct.
CSP14305
"Unsupported source[source URL] for directive[directive type] in [policy type] source will be ignored."
The source (URL, Keyword, or Data) listed in this directive is not supported and will be ignored.
The source site's address may include an optional leading wildcard (the asterisk character, ''). For example, http://.foo.com or mail.foo.com:*. The hosts are space-delimited. Sources may also be keywords (none, self, unsafe-inline, and unsafe-eval are supported) or data (data:URIs, mediastream:URIs).
CSP14306
"No sources given for directive [directive type] for[policy type] -- this is equivalent to using 'none' and will prevent the downloading of all resources of this type."
Giving a directive and not listing any sources for safe content to access is the same as not allowing any resources of the type specified in the directive to be downloaded.
A source can be one or more Internet host names or IP addresses, as well as an optional URL scheme and/or port number.
CSP14307
"Source [source URL]was already provided for directive [directive type] for[policy type]."
A duplicate source (URL, Keyword, or Data) has been listed in this directive and will be ignored.
Remove the duplicate source identified.
CSP14308
"Failed parsing directive in[policy type] at [directive name]."
The directive identified failed. For a reference list of how to write supported directives, see http://content-security-policy.com.
Directives must be separated with semicolons. If, for example, you have an application that loads all of it’s resources from a content delivery network, e.g. https://cdn.example.net, and know that you don’t need framed content or any plugins, then your policy might look like: Content-Security-Policy: default-src https://cdn.example.net; child-src 'none'; object-src 'none'. *While directives are separated with semicolons, sources within a directive are not, but should only be separated with a space.
CSP14309
"Unknown directive in[directive name] in [policy type] -- directive will be ignored."
The directive set in the CSP policy is not known and will be ignored.
For a list of supported directives, see http://content-security-policy.com.
CSP14310
"Unsupported directive[directive name] in [policy type] -- directive will be ignored."
A directive was found during parsing in the policy type (ie.Content-Security-policy-Report-Only header field) that is not supported and will be ignored. For supported directives, see http://content-security-policy.com.
Remove the unsupported directive. *Some directives are not supported in the <meta> element or in the Content-Security-policy-Report-Only header field.
CSP14311
"Directive [directive name]was already provided in[policy type] -- duplicate directive will be ignored."
A duplicate directive was found during parsing, the second directive and its source-expressions will be ignored.
Remove the duplicate script.
CSP14312
"Resource violated directive[directive name] in [policy type]: [target uri]. Resource will be blocked."
In this example: "Resource violated directive 'script-src ms-appx: data: 'unsafe-eval' in Host Defined Policy: inline script. Resource will be blocked."
An inline script (target uri) was blocked due to the directive 'script-src ms-appx: data: 'unsafe-eval' in the 'host defined' policy.
Authors need to move all inline script and style out-of-line because the user agent cannot determine whether an inline script was injected by an attacker. Remove inline script and place it in an external file.
CSP14313
"Resource violated directive[directive name] in [policy type]: [target uri]. Resource will not be blocked due to policy being report-only."
A resource was identified that violates the directive specified in the Content-Security-policy-Report-Only header field. Because it is in a Report-Only policy type, the resource will not be blocked.
Move the directive into a Content-Security-policy header field if this resource should be blocked in order to protect your site.
CSP14314
"Failed to send policy violation report to [target destination uri] because [reason for canceling the operation]."
There was a problem with reporting a policy violation, the target destination where the report is designated to be sent and the reason for not sending it should be identified.
The report-uri directive specifies a URL where a browser will send reports when a content security policy is violated. *It cant be used in <meta> tags.
CSP14315
"Failed to enforce sandbox directive in [policy type] because [reason for canceling the operation]."
The sandbox directive failed for the reasons specified. This directive places restrictions on actions the page can take, rather than on resources that the page can load. If the sandbox directive is present, the page will be treated as though it was loaded inside of an iframe. It can prevent popups, plugins and block script execution.
Keep the sandbox value empty to keep all restrictions in place, or add values: allow-forms allow-same-origin allow-scripts, and allow-top-navigation. *The sandbox directive is not supported in the <meta> element or in the Content-Security-policy-Report-Only header field.
CSP14316
"Script eval being allowed due to host override."
When either the script-src or the default-src directive is included, inline script and eval() are disabled unless you specify 'unsafe-inline' and 'unsafe-eval', respectively.
'unsafe-eval' allows the use of eval() and similar methods for creating code from strings. You must include the single quotes. Note: This is unsafe and can open your web site up to cross-site scripting vulnerabilities.
CSP14317
"Frame [source name] being allowed due to host override."
The source frame identified has been allowed due to an override set in the host CSP policy.
A policy may contain a nonce-source expression, meaning that the source can only be used on one occasion and the server must generate a fresh value for the directive each time it transmits a policy. Nonces override the restrictions in the directive in which they are present.
Note For websites in a user's trusted security zone, Microsoft Edge won't check the MIME type of a style sheet.
CSS codes
These errors are in the form CSS31xx and are related to Web Open Font Format (WOFF), and Embedded OpenType (EOT) font source and host server problems..
Code
Message
Description
Suggested fix
CSS3111
"@font-face encountered unknown error"
An unknown problem was encountered with the "Web Open Font Format (WOFF)", and "Embedded OpenType font (EOT)" of the Cascading Style Sheets (CSS) font.
Check source of "WOFF" fonts. Try alternate font face or source to see if you can reproduce the problem.
CSS3112
"@font-face failed WOFF integrity check"
The "Web Open Font Format (WOFF)" font is possibly corrupted, incomplete, or not the correct format.
Check source of the fonts. Try a known good font face or source to see if you can reproduce the problem.
CSS3113
"@font-face mismatch between document origin and EOT root string"
The font cannot be used because the URL(rootstring) in the "Embedded OpenType font (EOT)" doesn't match the domain of the document using the font.
The URL checksum in the "EOT" rootstring might be incorrect, indicating a corrupted or altered URL for the font. Make sure that the font is licensed or has permissions for the website where the fonts are being used.
CSS3114
"@font-face failed OpenType embedding permission check. Permission must be Installable."
The font-face doesn't have permissions to install with the current webpage.
Get the correct permission or licenses for embedding the font.
CSS3115
"@font-face unable to load invalid OpenType font."
The font-face is not valid for this use.
Get the permission or licenses for the current and valid font-face.
CSS3116
"@font-face failed cross-origin request. No Access-Control-Allow-Origin header."
The font might not be configured for cross-domain access.
The font isn't served from the same origin as the document. Make sure that the host serving the font allows the use of this font by using the "Access-Control-Allow-Origin"HTTP header.
CSS3117
"@font-face failed cross-origin request. Resource access is restricted."
The "Access-Control-Allow-Origin" header might not be configured correctly or the font host might not allow this font to be used by your page.
Make sure that the resource has correct permissions and a correctly configured HTTP response header that has cross-domain access origin on the host serving the fonts.
CSS3118
"Failed to create new stylesheet. There are more than [maximum] stylesheets in the document."
Microsoft Edge has created more than 4095 stylesheet objects during the process of rendering your page.
This might be an out-of-control JavaScript process or a build system error. Reduce the number of stylesheet objects being generated.
CSS3119
"The media query -ms-view-state has been deprecated. -ms-view-state media queries may be altered or unavailable for releases after Windows 8.1. Instead, use max-width and min-width queries."
Your CSS contains an -ms-view-state media query.
Use max-width and min-width.
HTML codes
These codes are in the form of HTML1xxx, such as HTML1115. Many of these are legacy codes specific to Internet Explorer concepts such as Document Mode and Compatibility View
Code
Message
Description
Suggested fix
HTML1112
"Codepage restart from [encoding] to [encoding]"
A codepage was specified that was different than the server's.
Use the same codepage as the server to avoid this message.
HTML1113
Document mode restart from [mode] to [mode]
The webpage requires a different document mode than the browser was currently set to.
This message can occur when the user browses from another page, so it can be out of the developer's control.
HTML1114
"Codepage [encoding] from [domain] overrides conflicting codepage [encoding] from [domain]"
The codepages specified in the HTTP (from server) and HTML (in-page) headers are different.
Change one so they match.
HTML1115
"X-UA-Compatible META tag ([META tag]) ignored because document mode is already finalized"
Typically the "META" tag was placed after a "Script" or "Style" declaration, which fixed the document mode for the page.
Move the X-UA-Compatible META tag as early in the header as possible. A good practice is to put it immediately after the <title> and charset value.
HTML1116
"X-UA-Compatible META tag ([META tag]) ignored because of earlier X-UA-Compatible META tag ([META tag])"
There is more than one "X-UA-Compatible" "META" tag in the <head> section of the source code.
Remove all but one "X-UA-Compatible META" tag, and ensure it is as early in the header as possible. A good practice is to put it immediately after the <title> and charset value.
HTML1121
"Codepage [encoding] is not allowed, only codepage [encoding] is allowed."
Content in the webpage invoked a character encoding that's not allowed in this context.
Make sure all content is using the allowed encoding that is specified in the message.
HTML1122
"Internet Explorer is running in Enterprise Mode emulating IE8"
The page is currently being rendered in Enterprise Mode, which is an emulation of Windows Internet Explorer 8.
This mode is configured by IT Management for specific sites. If an individual user needs to turn it off on a webpage, uncheck the Enterprise Mode option in the Tools menu. For more about management of Enterprise Mode, see the IT documentation.
HTML1201
"[domain] is a website you've added to Compatibility View."
The user has clicked the Compatibility View button for the current website or added it through the Compatibility View settings.
User initiated.
HTML1202
"[domain] is running in Compatibility View because "Display intranet sites in Compatibility View" is checked."
The user has selected the Display intranet sites in Compatibility View check box in the Compatibility View settings.
User needs to press Alt + T, click Compatibility View settings, and then clear the Display intranet sites in Compatibility View check box.
HTML1203
"[domain] has been configured to run in Compatibility View through Group Policy."
The network administrator has specified that the webpage be run in Compatibility View.
You need to contact the network administrator.
HTML1204
"[domain] is running in Compatibility View because "Display all websites in Compatibility View" is checked."
The user has selected the Display all websites in Compatibility View check box in the Compatibility View settings.
User needs to press Alt + T, click Compatibility View settings, and then clear the Display all websites in Compatibility View check box.
HTML1300
"Navigation occurred"
A new page was navigated to, or the current page was refreshed.
This is an informational message and not an error.
HTML5 parser warnings
The following warnings can occur as part of the validation performed during HTML parsing. These warnings don't necessarily mean a page is broken, but that the provided HTML is invalid per the HTML5 standard. Content created according to earlier versions of the HTML or XHTML specifications might not be valid in HTML5, in particular with respect to the use of DOCTYPEs.
Common causes of these warnings include missing or additional characters, and mismatched tags. When you resolve these warnings, compatibility with older browsers and a webpage’s compliance with the HTML5 standard can improve. To help identify the source of a warning, will include line and character offset information along with a link pointing to the location where the problem was found.
Code
Message
HTML1400
"Unexpected character at start of numeric character reference. Expected [0-9]."
HTML1401
"Unexpected character at start of hexadecimal numeric character reference. Expect ed [0-9], [a-f], or [A-F]."
HTML1402
"Character reference is missing an ending semicolon ";"."
HTML1403
"Numeric character reference does not resolve to a valid character."
HTML1404
"Unrecognized named character reference."
HTML1405
"Invalid character: U+0000 NULL. Null characters should not be used."
HTML1406
"Invalid tag start: <?. Question marks should not start tags."
HTML1407
"Invalid tag name. First character should match [a-zA-Z]."
HTML1408
"Invalid end tag </>. End tags should not be empty."
HTML1409
"Invalid attribute name character. Attribute names should not contain ("),('),(<), or (=)."
HTML1410
"Invalid unquoted attribute value. Unquoted attribute values should not contain ("), ('), (<), (=), or (`)."
HTML1411
"Unexpected end of file."
HTML1412
"Malformed comment. Comments should start with <!-- `."
HTML1413
"Unexpected character: U+003E GREATER-THAN SIGN (>)"
HTML1414
"Unexpected character: U+0021 EXCLAMATION MARK (!)"
HTML1415
"Unexpected character: U+002D HYPHEN-MINUS (-)"
HTML1416
"Unexpected character in comment end. Expected "-->"."
HTML1417
"Empty DOCTYPE. The shortest valid doctype is <!DOCTYPE html>."
HTML1418
"Unexpected character in DOCTYPE."
HTML1419
"Unexpected keyword in DOCTYPE. Expected "PUBLIC" or "SYSTEM"."
HTML1420
"Unexpected quote after "PUBLIC" or "SYSTEM" keyword. Expected whitespace."
HTML1421
"Malformed end tag. End tags should not contain attributes."
HTML1422
"Malformed start tag. A self closing slash should be followed by a U+003E GREATER-THAN SIGN (>)."
HTML1423
"Malformed start tag. Attributes should be separated by whitespace."
HTML1424
"Invalid character "
HTML1500
"Tag cannot be self-closing. Use an explicit closing tag."
HTML1501
"Unexpected end of file."
HTML1502
"Unexpected DOCTYPE. Only one DOCTYPE is allowed and it must occur before any elements."
HTML1503
"Unexpected start tag."
HTML1504
"Unexpected end tag."
HTML1505
"Unexpected character token."
HTML1506
"Unexpected token."
HTML1507
"Unexpected character: U+0000 NULL. Null characters should not be used."
HTML1508
"Unmatched end tag."
HTML1509
"Unmatched end tag."
HTML1510
"Required nodes not in scope."
HTML1511
"Unexpected head-level element encountered outside of <head>."
HTML1512
"Unmatched end tag."
HTML1513
"Extra <html> tag fond. Only one <html> tag should exist per document."
HTML1514
"Extra <body> tag found. Only one <body> tag should exist per document."
HTML1515
"Found <frameset> too far down in the document. This tag should occur before a <body> is created."
HTML1516
"Invalid nesting. A header tag such as <h1> or <h2> should not be placed within another header tag."
HTML1517
"Invalid nesting. A <form> tag should not be placed within another <form>."
HTML1518
"Invalid nesting. A <button> tag should not be placed within another <button>."
HTML1519
"Invalid nesting. An <a> tag should not be placed within another <a>."
HTML1520
"Unexpected start tag: The <isindex> element is deprecated and should not be used."
HTML1521
"Unexpected </body> or end of file. All open elements should be closed before the end of the document."
HTML1522
"Invalid end tag: </br>. Use <br> or <br/> instead."
HTML1523
"Overlapping end tag. Tags should be structured like <b><i></i></b> instead of <b><i></b></i>."
HTML1524
"Invalid DOCTYPE. The shortest valid doctype is <!DOCTYPE html>."
HTML1525
"Unexpected HTML tag found inside foreign content (MathML/SVG)."
HTML1526
"Invalid nesting. A <nobr> tag should not be placed within another <nobr>."
HTML1527
"DOCTYPE expected. The shortest valid doctype is <!DOCTYPE html>."
HTML1528
"Unexpected <image> in HTML content. Use <img> instead."
HTML1529
"Invalid xmlns:xlink attribute value. The value must be "http://www.w3.org/1999/xlink"."
HTML1530
"Text found within a structural table element. Table text may only be placed inside <caption>, <td>, or <th> elements."
HTML1531
"Invalid xmlns attribute value. For SVG elements the value must be "http://www.w3.org/2000/svg/"."
HTML1532
"Invalid xmlns attribute value. For MathML elements the value must be "http://www.w3.org/1998/Math/MathML/".
HTTP Codes
HTTP error codes are returned from remote servers in response to requests. Probably the most familiar is HTTP404, which is returned whenever the server can't find the page/document specified in the URI.
Code
Message
Description
HTTP400
BAD REQUEST
The request could not be processed by the server due to invalid syntax.
HTTP401
DENIED
The requested resource requires user authentication.
HTTP402
PAYMENT REQUIRED
Not currently implemented in the HTTP protocol.
HTTP403
FORBIDDEN
The server understood the request, but is refusing to fulfill it.
HTTP404
NOT FOUND
The server has not found anything matching the requested URI (Uniform Resource Identifier).
HTTP405
BAD METHOD
The HTTP verb used is not allowed.
HTTP406
NONE ACCEPTABLE
No responses acceptable to the client were found.
HTTP407
PROXY AUTHENTICATION REQUIRED
Proxy authentication required.
HTTP408
REQUEST TIMEOUT
The server timed out waiting for the request.
HTTP409
CONFLICT
The request could not be completed due to a conflict with the current state of the resource.
HTTP410
GONE
The requested resource is no longer available at the server, and no forwarding address is known.
HTTP411
LENGTH REQUIRED
The server refuses to accept the request without a defined content length.
HTTP412
PRECONDITION FAILED
The precondition given in one or more of the request header fields evaluated to false when it was tested on the server.
HTTP413
PAYLOAD TOO LARGE
The server is refusing to process a request because the request entity is larger than the server is willing or able to process.
HTTP414
URI TOO LONG
The server is refusing to service the request because the request URI (Uniform Resource Identifier) is longer than the server is willing to interpret.
HTTP415
UNSUPPORTED MEDIA TYPE
The server is refusing to service the request because the entity of the request is in a format not supported by the requested resource for the requested method.
HTTP416
REQUESTED RANGE NOT SATISFIABLE
The server cannot provide the portion of the file the client has requested. The portion may extend beyond the end of the file.
HTTP417
EXPECTATION FAILED
The server cannot meet the requirements of the Expect request-header field.
HTTP418
IM A TEAPOT
The server is a teapot, it cannot brew coffee.
HTTP419
AUTHENTICATION TIMEOUT
The previously valid authentication has expired.
HTTP422
UNPROCESSABLE ENTITY
The request was well-formed but could not be processed due to semantic errors.
HTTP423
LOCKED
The resource being accessed is locked.
HTTP424
FAILED DEPENDENCY
The request failed due to the failure of a previous request.
HTTP426
UPGRADE REQUIRED
The client must switch to a different protocol.
HTTP428
PRECONDITION REQUIRED
The origin server requires the request to be conditional.
HTTP429
TOO MANY REQUESTS
The server is refusing to service the request because too many requests have been submitted by the client.
HTTP431
REQUEST HEADER FIELDS TOO LARGE
The server is refusing to service the request because a header field, or all header fields collectively, are larger than the server is willing or able to process.
HTTP449
RETRY WITH
The request should be retried after doing the appropriate action.
HTTP500
SERVER ERROR
The server encountered an unexpected condition that prevented it from fulfilling the request.
HTTP501
NOT SUPPORTED
The server does not support the functionality required to fulfill the request.
HTTP502
BAD GATEWAY
The server, while acting as a gateway or proxy, received an invalid response from the upstream server it accessed in attempting to fulfill the request.
HTTP503
SERVICE UNAVAILABLE
The service is temporarily overloaded.
HTTP504
GATEWAY TIMEOUT
The request was timed out waiting for a gateway.
HTTP505
VERSION NOT SUPPORTED
The server does not support, or refuses to support, the HTTP protocol version that was used in the request message.
HTTP506
VARIANT ALSO NEGOTIATES
Transparent content negotiation for the request resulted in circular references.
HTTP507
INSUFFICIENT STORAGE
The server is unable to store the representation needed to complete the request.
HTTP508
LOOP DETECTED
The server detected an infinite loop while servicing the request.
HTTP510
NOT EXTENDED
Further extensions to the request are required for the server to fulfill it.
HTTP511
NETWORK AUTHENTICATION REQUIRED
The client must authenticate to gain network access.
Security codes
Security error codes are in the form SEC7xxx, such as SEC7113. These reflect security conditions that Microsoft Edge enforces, such as mixed content, and Tracking Protection.
Code
Message
Description
Suggested fix
SEC7111
"HTTPS security is compromised by [name of resource]"
A Secure Hypertext Transfer Protocol (HTTPS) page has content from a non-secure source.
Make sure all content in the page, including scripts, stylesheets, and images, are from HTTPS sources.
SEC7112
"Script from [URL] was blocked due to mime type mismatch"
The HTTP response header for the JavaScript file specified by the URL has an "X-Content-Type-Options: nosniff" header, and didn't have a recognized content type declaration.
Update the server to send the correct content type for the JavaScript file (such as text/javascript, application/javascript", and so on) in the HTTP response header. See MIME-Handling Changes in Internet Explorer for more info and a full list of content types.
SEC7113
"CSS was ignored due to mime type mismatch"
An imported style sheet wasn't used because the wrong MIME type was in the HTTP header.
Make sure the style sheet file is delivered with the proper HTTP response header, which includes a content type of text/css. See MIME-Handling Changes in Internet Explorer for more info.
SEC7114
"A download in this page was blocked by Tracking Protection.[URL provided here]"
The user blocked a script or content by using Tracking Protection.
None - user initiated.
SEC7115
":visited and :link styles can only differ by color. Some styles were not applied to :visited."
More than one attribute, such as font or size, were changed by using the visited and link styles.
Change only the color attribute.
SEC7116
"Access Denied. Failed to revoke cross-origin URL: [URL]."
A script that has a different site of origin than the blob tried to revoke a blob URL. Due to blob origin policies, the attempt failed.
Make sure that all blob URLs are revoked using scripts from the same site of origin as the document that created the blob URL.
SEC7120
"Origin [domain] not found in Access-Control-Allow-Origin header."
In the response to your XMLHttpRequest, the "Access-Control-Allow-Origin" header was returned with a value that doesn't contain/match your site's origin value.
The resource is returning the right type of header codes, but is not allowing your site. Contact the developer in charge of the resource to update their "Access-Control-Allow-Origin" header so your site is allowed. You can point them to CORS for XHR in IE10 for more info about CORS in response headers.
SEC7121
"Wildcard in Access-Control-Allow-Origin not allowed when credentials flag is set to true."
The server is returning "Access-Control-Allow-Origin: *" in the headers, but this is not allowed when the withCredentials flag is set to "true" in the XMLHttpRequest.
The server-side handler needs to be modified to return an "Access-Control-Allow-Origin" header that specifically allows your origin point on this type of request. If you do not control the server-side handler, you'll need to talk to the developer who does.
SEC7122
"Credentials flag was set to true, but Access-Control-Allow-Credentials was not present or was not set to "true."
An XMLHttpRequest was made using the withCredentials flag. Either an Access-Control-Allow-Credentials header was not returned or it was returned with a value other than true.
There might be an issue with your credentials or the server's response. See the XMLHttpRequest Level 2 specification for info about credentialed requests.
SEC7123
"Request header [header] was not present in the Access-Control-Allow-Headers list."
A custom header type was included in the request, but the response's Access-Control-Allow-Headers list didn't include it.
Make sure the server allows custom headers, and specifically allows the one being sent in the request.
SEC7124
"Request method [method] was not present in the Access-Control-Allow-Methods list."
A request method, such as POST was used in the XMLHttpRequest, but the response returned an Access-Control-Allow-Methods header that didn't include it.
Make sure the server allows this type of request method and that you're correctly using withCredentials if that method has restricted access.
SEC7125
"XMLHttpRequest for [URL] caused a response headers parsing failure."
The response headers from the server could not be parsed, so the request failed.
Use the Network tool to capture and inspect the response headers to make sure they meet CORS specifications.
SEC7126
"Redirects are not allowed for CORS preflight requests."
A redirect has been detected in the Origin header and the User Agent won't follow redirects during a preflight.
Use the Network tool to capture and inspect the request headers and make sure there's a single direct Origin.
SEC7127
"Redirect was blocked for CORS request."
The path to the CORS resource contained a redirect that violated security rules.
Make sure you have the most direct path to the CORS resource in your XMLHttpRequest.
SEC7128
"Multiple Access-Control-Allow-Origin headers are not allowed for CORS response."
The response header contained multiple Access-Control-Allow-Origin headers.
This is a server-side error. The server should return a single Access-Control-Allow-Origin header. Report this error to the developer in charge of the server-side resource.
SEC7129
"Multiple Access-Control-Allow-Credentials headers are not allowed for CORS response."
The response header contained multiple Access-Control-Allow-Credentials headers.
This is a server-side error. The server should return a single Access-Control-Allow-Credentials header. Report this error to the developer in charge of the server-side resource.
SEC7130
"Potential cross-site scripting detected in [URL]. The content has been modified by the XSS Filter."
The XSS Filter detected potentially malicious content in the response from the resource and removed the offending content.
Find out more about the XSS Filter.
SEC7131
"Security of a sandboxed iframe is potentially compromised by allowing script and same origin access."
If the content in a sandboxed iframe comes from an untrusted or insecure source, it could escape the sandbox when script and same origin access are both allowed.
This is an informational warning message and should not impact functionality. It's recommended that you avoid combining these permissions unless you're sure of what will be run in the iframe.
SEC7132
"The certificate protecting this web site uses weak cryptography"
The TLS security certificate used by this website uses weak cryptography
Update the server’s TLS certificate
Note For websites in a user's trusted security zone, Microsoft Edge won't check the MIME type of a style sheet.
SVG codes
tools don't currently support extensive Scalable Vector Graphics (SVG) debugging, but some console messages are provided to help with debugging.
Code
Message
Description
Suggested fix
SVG5601
"SVG Path data has incorrect format and could not be completely parsed."
The SVG Path string isn't formatted correctly, or contains unrecognized commands.
Check the format of the commands.
SVG5602
"SVG Point list has incorrect format and could not be completely parsed."
The list of points used for an element, such as a polyline, is formatted incorrectly.
Make sure that points are complete and correctly formatted for the users coordinate system.
XML codes
XML codes are in the form of XML5xxx, such as XML5603.
Code
Message
XML5001
"Applying Integrated XSLT Handling."
XML5601
"MX_E_MX"
XML5602
"Unexpected end of input."
XML5603
"Unrecognized encoding."
XML5604
"Unable to switch the encoding."
XML5605
"Unrecognized input encoding signature."
XML5606
"WC_E_WC"
XML5607
"Whitespace expected."
XML5608
"Semicolon expected."
XML5609
"Expected ">"."
XML5610
"Quote character expected."
XML5611
"Expected "="."
XML5612
"The < character is not allowed in attributes values."
XML5613
"Hexadecimal digit expected."
XML5614
"Decimal digit expected."
XML5615
"Expected "["."
XML5616
"Expected "("."
XML5617
"Illegal XML character."
XML5618
"Illegal name character."
XML5619
"Incorrect document syntax."
XML5620
"Incorrect CDATA section syntax."
XML5621
"Incorrect comment syntax."
XML5622
"Incorrect conditional section syntax."
XML5623
"Incorrect ATTLIST declaration syntax."
XML5624
"Incorrect DOCTYPE declaration syntax."
XML5625
"Incorrect ELEMENT declaration syntax."
XML5626
"Incorrect ENTITY declaration syntax."
XML5627
"Incorrect NOTATION declaration syntax."
XML5628
"Expected "NDATA"."
XML5629
"Expected "PUBLIC"."
XML5630
"Expected "SYSTEM"."
XML5631
"Invalid name."
XML5632
"Only one root element is allowed."
XML5633
"End-tag name does not match the corresponding start-tag name."
XML5634
"An attribute with the same name already exists on this element."
XML5635
"An XML declaration is only allowed at the beginning of the file."
XML5636
"Leading "xml"."
XML5637
"Incorrect text declaration syntax."
XML5638
"Incorrect XML declaration syntax."
XML5639
"Incorrect encoding name syntax."
XML5640
"Incorrect public identifier syntax."
XML5641
"Parameter entity references are not allowed within markup declarations in an internal DTD subset."
XML5642
"The replacement text for parameter entity references used between markup declarations must itself contain a series of complete markup declarations."
XML5643
"A parsed entity must not contain a direct or indirect reference to itself."
XML5644
"The content of the specified entity is not well-formed."
XML5645
"The specified entity has not been declared."
XML5646
"Entity reference cannot contain the name of an unparsed entity."
XML5647
"Attribute values must not contain direct or indirect references to external entities."
XML5648
"Incorrect processing instruction syntax."
XML5649
"Incorrect system identifier syntax."
XML5650
"Expected a question mark (?)."
XML5651
"The CDATA-section-close delimiter "]]>" must not be used in element content."
XML5652
"Not all chunks of data have been read."
XML5653
"DTD was found but is prohibited."
XML5654
"Found xml:space attribute with invalid value. Valid values are "preserve" or "default"."
XML5655
"NC_E_NC"
XML5656
"Illegal qualified name character."
XML5657
"Multiple colons ":" must not occur in a qualified name."
XML5658
"A colon ":" must not occur in a name."
XML5659
"Declared prefix."
XML5660
"The specified prefix has not been declared."
XML5661
"Non-default namespace declarations must not have an empty URI."
XML5662
"The "xml" prefix is reserved and must have the URI "http://www.w3.org/XML/1998/namespace/"."
XML5663
"The "xmlns" prefix is reserved for use by XML."
XML5664
"The xml namespace URI (http://www.w3.org/XML/1998/namespace/) must only be assigned to the prefix "xml"."
XML5665
"The xmlns namespace URI (http://www.w3.org/2000/xmlns/) is reserved and must not be used."
XML5666
"SC_E_SC"
XML5667
"Exceeded maximum depth of nested elements."
XML5668
"Exceeded maximum number of entity expansions."
XML5669
"WR_E_WR"
XML5670
"WR_E_NONWHITESPACE: writer: specified string is not whitespace."
XML5671
"WR_E_NSPREFIXDECLARED: writer: namespace prefix is already declared with a different namespace."
XML5672
"WR_E_NSPREFIXWITHEMPTYNSURI: writer: cannot use prefix with empty namespace URI."
XML5673
"WR_E_DUPLICATEATTRIBUTE: writer: duplicate attribute."
XML5674
"WR_E_XMLNSPREFIXDECLARATION: writer: can not redefine the xmlns prefix."
XML5675
"WR_E_XMLPREFIXDECLARATION: writer: xml prefix must have the http://www.w3.org/XML/1998/namespace/ URI."
XML5676
"WR_E_XMLURIDECLARATION: writer: xml namespace URI (http://www.w3.org/XML/1998/namespace/) must be assigned only to prefix "xml"."
XML5677
"WR_E_XMLNSURIDECLARATION: writer: xmlns namespace URI (http://www.w3.org/2000/xmlns/) is reserved and must not be used."
XML5678
"WR_E_NAMESPACEUNDECLARED: writer: namespace is not declared."
XML5679
"WR_E_INVALIDXMLSPACE: writer: invalid value of xml:space attribute (allowed values are "default" and "preserve")."
XML5680
"WR_E_INVALIDACTION: writer: performing the requested action would result in invalid XML document."
XML5681
"WR_E_INVALIDSURROGATEPAIR: writer: input contains invalid or incomplete surrogate pair."
XML5682
"Unexpected character in character entity. Expected a decimal digit."
XML5683
"Unexpected character in character entity. Expected a hexadecimal digit."
XML5684
"The Unicode value of the specified character entity is invalid."
XML5685
"Invalid encoding."
XML5686
"Unspecified XML error."