1. EOT - Embedded OpenType fonts

    Type of font that can be derived from a regular font, allowing small files and legal use of high-quality fonts. Usage is restricted by the file being tied to the website

  2. Strict Transport Security

    Declare that a website is only accessible over a secure connection (HTTPS).

  3. ECMAScript 5 Strict Mode

    Method of placing code in a "strict" operating context.

  4. XHTML served as application/xhtml+xml

    A strict form of HTML, and allows embedding of other XML languages

  5. browsercapturemediastreamtrack api: restrictto

  6. document api: requeststorageaccess: third-party cookies sent only with requests to the calling embed's exact origin, not the whole site.

  7. mediastreamtrack api: applyconstraints: `restrictownaudio` constraint

  8. restrictiontarget api

  9. restrictiontarget api: `fromelement()` static method

  10. sharedworker api: `sharedworker()` constructor: strict mime type checks for shared worker scripts

  11. websocket api: subject to local network access restrictions

  12. webtransport api: subject to local network access restrictions

  13. wgsllanguagefeatures api: `unrestricted_pointer_parameters` extension

  14. windowclient api: navigate: subject to local network access restrictions when the navigated `windowclient` is a subframe

  15. workerglobalscope api: importscripts: strict mime type checks for `importscripts()`

  16. worker api: `worker()` constructor: strict mime type checks for worker scripts

  17. css property: contain: strict

  18. css property: line-break: strict

  19. css selector: `:visited`: restrict css properties allowed in a statement using `:visited` for privacy

  20. headers http header: content-security-policy: `strict-dynamic` source value

  21. headers http header: referrer-policy: default policy is `strict-origin-when-cross-origin`

  22. headers http header: referrer-policy: strict-origin

  23. headers http header: referrer-policy: strict-origin-when-cross-origin

  24. headers http header: `service-worker-allowed` response header to broaden path restrictions for a service worker's default scope.

  25. headers http header: set-cookie: samesite: `samesite=strict`

  26. javascript operator: strict equality (`a === b`)

  27. javascript operator: strict inequality (`a !== b`)