1. Autofocus attribute

    Allows a form field to be immediately focused on page load.

  2. Beacon API

    Allows data to be sent asynchronously to a server with `navigator.sendBeacon`, even after a page was closed. Useful for posting analytics data the moment a user was finished using the page.

  3. calc() as CSS unit value

    Method of allowing calculated values for length units, i.e. `width: calc(100% - 3em)`

  4. CSS first-line pseudo-element

    Allows styling specifically for the first line of text using the `::first-line` pseudo-element. Note that only a limited set of properties can be applied.

  5. CSS hanging-punctuation

    Allows some punctuation characters from start (or the end) of text elements to be placed "outside" of the box in order to preserve the reading flow.

  6. CSS Painting API

    Allows programmatic generation of images used by CSS

  7. Do Not Track API

    API to allow the browser's Do Not Track setting to be queried via `navigator.doNotTrack`. Due to lack of adoption the Do Not Track specification was deprecated in 2018.

  8. Feature Policy

    This specification defines a mechanism that allows developers to selectively enable and disable use of various browser features and APIs. Feature Policy is deprecated and has been replaced with [Permissions Policy](/permissions-policy) and [Document Policy](/document-policy).

  9. FileReaderSync

    Allows files to be read synchronously in Web Workers

  10. MathML

    Special tags that allow mathematical formulas and notations to be written on web pages.

  11. Media Fragments

    Allows only part of a resource to be shown, based on the fragment identifier in the URL. Currently support is primarily limited to video track ranges.

  12. Path2D

    Allows path objects to be declared on 2D canvas surfaces

  13. Permissions Policy

    A security mechanism that allows developers to explicitly enable or disable various powerful browser features for a given site. Similar to [Document Policy](/document-policy).

  14. WebUSB

    Allows communication with devices via USB (Universal Serial Bus).

  15. featurepolicy api: allowedfeatures

  16. featurepolicy api: allowsfeature

  17. htmlfencedframeelement api: allow

  18. htmliframeelement api: allow

  19. htmliframeelement api: allowfullscreen

  20. htmliframeelement api: allowpaymentrequest

  21. webtransport api: `webtransport()` constructor: `options.allowpooling` parameter

  22. css property: cursor: not-allowed

  23. css property: hanging-punctuation: allow-end

  24. css selector: `:visited`: restrict css properties allowed in a statement using `:visited` for privacy

  25. html element: iframe: allow

  26. html element: iframe: allowfullscreen

  27. html element: iframe: allowpaymentrequest

  28. html element: iframe: sandbox: `sandbox="allow-downloads"`

  29. html element: iframe: sandbox: `sandbox="allow-downloads-without-user-activation"`

  30. html element: iframe: sandbox: `sandbox="allow-forms"`

  31. html element: iframe: sandbox: `sandbox="allow-modals"`

  32. html element: iframe: sandbox: `sandbox="allow-orientation-lock"`

  33. html element: iframe: sandbox: `sandbox="allow-pointer-lock"`

  34. html element: iframe: sandbox: `sandbox="allow-popups"`

  35. html element: iframe: sandbox: `sandbox="allow-popups-to-escape-sandbox"`

  36. html element: iframe: sandbox: `sandbox="allow-presentation"`

  37. html element: iframe: sandbox: `sandbox="allow-same-origin"`

  38. html element: iframe: sandbox: `sandbox="allow-scripts"`

  39. html element: iframe: sandbox: `sandbox="allow-storage-access-by-user-activation"`

  40. html element: iframe: sandbox: `sandbox="allow-top-navigation"`

  41. html element: iframe: sandbox: `sandbox="allow-top-navigation-by-user-activation"`

  42. html element: iframe: sandbox: `sandbox="allow-top-navigation-to-custom-protocols"`

  43. headers http header: access-control-allow-credentials

  44. headers http header: access-control-allow-headers

  45. headers http header: access-control-allow-headers: `authorization` header is not covered by wildcard

  46. headers http header: access-control-allow-headers: wildcard (`*`)

  47. headers http header: access-control-allow-methods

  48. headers http header: access-control-allow-methods: wildcard (`*`)

  49. headers http header: timing-allow-origin

  50. headers http header: x-frame-options: allow-from