189 plain-English definitions, from CAA issuer to Customised built-in element. Terms with a link have a full explanation with a Jersey example. To search every term, go back to the Jargon Buster.
A CAA issuer identifier names a certificate authority in a relevant CAA issuance property. It is a value used in certificate-issuance policy, rather than the address of the website host. Obtain the current identifier and requirements from the certificate or hosting provider before editing the actual domain policy.
A CAA record is a DNS record that can restrict which certificate authorities may issue certificates for a domain. It concerns certificate issuance, rather than installing a certificate or switching a website to HTTPS. A Jersey business should align the policy with its hosting providers and check issuance and renewal requirements.
Also called: Certification Authority Authorization
A cache stores information for reuse so a system can avoid fetching or computing it again unnecessarily.
Also called: caching
The Cache API lets supported web code store and retrieve request and response pairs under application control. It is often used with service workers but can also be used in page contexts. A Jersey business should review what is stored, when it changes and what happens when it is absent; this storage follows different rules from ordinary HTTP caching.
Cache match searches a Cache API store for a response associated with a matching request. It returns no response when a match is absent. Review the application’s matching options and fallback logic; a cache lookup differs from making a fresh network request or establishing that the stored information is still current.
Also called: Cache.match
Cache put stores a request and response pair in a Cache API store and can overwrite an existing matching entry. The application controls when to use it and which responses are appropriate to retain. Review the response and update policy; saving a response does not automatically make it suitable for every customer or future visit.
Also called: Cache.put
Cache-Control is an HTTP header carrying instructions about storing and reusing requests or responses through relevant caches. Directives such as no-cache and no-store have different meanings. A Jersey business should review freshness, personalisation and the actual browser, hosting and application layers before changing the rules, then verify what returning visitors receive.
CacheStorage manages named Cache API stores and provides access to the relevant Cache objects. It can be used from supported page or worker contexts, so it is not limited to service workers. Review the application’s cache naming, updates and cleanup; the storage interface differs from the browser’s ordinary HTTP cache.
Also called: Cache Storage interface
A calculated metric combines supported existing or custom metrics in a mathematical formula to produce another Analytics measure. Document the inputs, formula and unit. A useful label should explain the calculation’s actual meaning, and the business should review whether that meaning supports its decision before relying on the resulting number.
Also called: GA4 calculated metric
A call to action, often shortened to CTA, is a clear invitation for someone to take the next step on a page or advert.
Also called: CTA, action button
A callback is a function supplied to other code so that code can call it at the appropriate point. It can be used in synchronous or asynchronous arrangements. Ask what event or result triggers the actual operation and how the application handles unsuccessful work.
Also called: callback
The cancelAnimationFrame method cancels a frame callback request previously scheduled through requestAnimationFrame, using its request identifier. It affects scheduled visual-update work rather than establish that an underlying business operation stopped or reversed. Review the actual animation lifecycle and customer task separately, including the supported next action.
Also called: cancelAnimationFrame()
A canonical URL is the preferred address for a page among duplicate or very similar versions.
Also called: canonical tag, rel canonical
Canonicalisation is the process of selecting a representative URL among duplicate or very similar pages. Search engines use their own signals and decisions; a declared canonical is a preference rather than guaranteed selection. Keep content, redirects, links and sitemap choices consistent with the intended public destination.
Also called: canonicalization
A CAPTCHA is a challenge or related mechanism intended to help distinguish human activity from automated activity. It is not a guarantee that abuse will stop. Review accessibility, privacy and the complete form-protection setup before placing a challenge in a Jersey customer’s enquiry journey.
Card sorting asks participants to group representative content items in ways that make sense to them. It can suggest possible content organisation and labels. The results do not automatically produce the final website structure, so interpret them alongside the actual content, user tasks and further evaluation.
Also called: card sort
A catch-all email arrangement routes messages addressed to otherwise undefined addresses at a domain to a chosen destination. It can collect misaddressed messages but also brings handling responsibilities. Review the routing scope, destination access and who checks the resulting mailbox instead of assuming every captured message is a valid enquiry.
Also called: catch-all address
Cc, or carbon copy, identifies additional message recipients in a visible recipient field. Other recipients can generally see these listed addresses. Check whether that visibility is intended and review reply-all behaviour before sending a message that includes customer or staff contact details.
Also called: carbon copy
A CDN, or content delivery network, uses distributed servers to deliver website content closer to visitors.
Also called: content delivery network
A certificate authority issues digital certificates through its relevant validation and signing process. In a website connection, certificates help establish the identity involved in the supported trust arrangement. A valid certificate does not establish the business’s honesty or the quality of its service, so keep connection evidence distinct from business judgement.
Also called: CA
A certificate chain connects a relevant certificate through signing relationships to a trusted authority in the client’s validation arrangement. Intermediates and client trust can affect the result. Review the actual certificate installation and supported clients; a certificate file existing on the server does not by itself demonstrate a valid connection.
Also called: chain of trust
Certificate revocation marks an issued certificate as no longer trusted under the issuing authority’s revocation process. It can be relevant when private key material is compromised. It is separate from expiry or changing CAA policy. Contact the responsible certificate provider and follow its authorised process, while reviewing replacement and affected services.
The change event reports a control value change at a point that depends on the control and interaction, such as a committed selection or a changed text field losing focus. It is not necessarily fired for every edit. Review the expected feedback timing so customers understand when their choice affects the feature.
Also called: change browser event
A channel group categorises traffic sources using defined rules, such as grouping relevant arrivals under organic search or email. Google Analytics offers default and custom arrangements. Review the exact group and scope being shown, because a channel label depends on classification rules rather than direct evidence of every visitor’s motivation.
Also called: analytics channel group
Character encoding defines how text corresponds to byte data. A reader needs the appropriate encoding to interpret a file or exchange correctly. A Jersey business should document the source and receiving arrangement and compare representative results; a format label, successful import or readable first line does not verify every character through the complete workflow.
Also called: Text encoding
A character set identifies a repertoire of characters, while a coded character set assigns identifiers and an encoding specifies a data representation. These related concepts should be distinguished when documenting a text exchange. Check the actual source and receiver rather than treat a general character-set label as proof that all required text survives an import.
Also called: Character repertoire
Chatbots are systems that respond to people through a conversational interface. Some follow fixed rules; others generate answers using AI. A website chatbot should state its role and offer a reliable handover for difficult questions. Do not let an unchecked response invent prices, booking availability or business policies.
Also called: chatbot
ChatGPT is an OpenAI AI service that accepts natural-language requests to help with tasks such as explanations, ideas and drafts. It can be useful for business content, but results still need review. Give relevant context, verify factual claims and avoid sharing confidential customer information without an appropriate arrangement.
The checkValidity method checks a supported input’s constraints and returns a Boolean result, firing an invalid event when appropriate. It does not provide a default browser validation message. Have the maintainer show the actual customer feedback, and keep a passing constraint result separate from verifying information or confirming a request outcome.
Also called: checkValidity()
Checkout is the process that turns a shopping selection into an order, including the relevant customer, delivery and payment steps.
Chunked transfer coding lets an HTTP/1.1 message send content in length-delimited pieces without declaring its complete length up front. It is a message-framing arrangement, not a file format or an instruction to split customer records. Later HTTP versions use different framing, so check the connection being discussed.
Also called: Chunked transfer coding
Element.classList provides a live token collection representing an element’s class attribute, with supported operations to change it. Classes can affect presentation or feature matching. Review what the implemented class change means and inspect the actual content and controls, rather than assume a changed class alone establishes the approved customer outcome.
Also called: Element.classList
Click and collect lets a customer order online and collect from an agreed location. The shop needs a clear collection arrangement and readiness message. Order confirmation should not imply that the goods are already prepared; review stock, staff responsibilities, collection instructions and the actual ready-for-collection notification.
Also called: store pickup
Clickjacking tricks a person into interacting with a target page in a way they did not intend, commonly through deceptive embedding. Browser policies can restrict who embeds a page. Review the application’s legitimate embedding requirements and relevant protections instead of assuming a familiar visible button proves which underlying action will occur.
Client-side rendering uses software in the visitor’s browser to generate or update page content. It can support interactive applications, but it creates dependencies on script delivery and execution. Check loading, errors and important content availability for the actual visitor experience.
Also called: CSR
Client-side validation checks entered information in the browser. It can provide useful feedback before a receiving request, but those checks can be bypassed. Review the field rules and actual correction route, then identify the receiving component that validates submitted data so the business knows which acceptance decision each stage supports.
Also called: browser validation
The Clipboard API provides supported ways for web code to read or write clipboard information under applicable security and interaction rules. Browser restrictions vary. A copy button should report its actual outcome and offer a usable alternative, rather than claim success before the operation is confirmed.
A cloud instance is a provisioned computing environment supplied through a cloud service, commonly a virtual-machine arrangement. The available resources and management responsibilities depend on the service. Record the actual workload, access, maintenance and recovery requirements rather than assuming that a running instance is a complete managed website.
A cloud region is a provider-defined geographic area containing relevant service infrastructure. Available services and location handling depend on the provider. Review the actual locations used for the application, data, copies and integrations; choosing one region does not by itself establish every service dependency or satisfy every business requirement.
A CMS, or content management system, is software that helps people create, edit and organise website content without changing each page's code by hand.
Also called: content management system, website CMS
A CNAME record makes one DNS name an alias of another name. A provider may use it to connect a subdomain to a hosted service. It is different from a web redirect, which sends a browser to another URL. Follow the provider’s instructions and DNS constraints.
A code point is a numerical position in a character system such as Unicode, commonly written with a U+ prefix for Unicode values. An encoding determines its byte representation. Distinguish code points from code units and user-perceived characters when reviewing text limits; counting one kind of unit does not automatically count the others.
Also called: Unicode code point
Code review examines proposed code changes to identify issues and understand their effect before they are accepted. It can involve discussion and requested corrections alongside automated checks. Give reviewers a clear change description and relevant evidence; an approval applies to the reviewed scope and is not a guarantee against every defect.
Code splitting divides application code into pieces that can be loaded when needed. It can reduce initial work, but extra requests and later loading still affect the experience. Check common customer actions as well as the first page view when judging the result.
Also called: split bundle
A code unit is a basic unit used by a character encoding. Encoding a Unicode value can require more than one such unit; UTF-8 and UTF-16 use different unit sizes. Ask what an application actually counts before promising a customer-visible character limit or comparing it with the encoded data size.
Also called: Character encoding code unit
A cognitive walkthrough is a structured review of a task from a new user’s perspective, focusing on how learnable the steps appear. Reviewers assess the interface rather than recruit users for that method. Keep their assumptions explicit and use suitable user research when actual behaviour needs to be established.
A cohort groups users sharing a defined characteristic, such as an acquisition period, for analysis over time. The inclusion and return criteria determine the reported group. Check those rules and the relevant identity limitations before interpreting a change as improved customer retention.
Also called: analytics cohort
Colour contrast describes the difference between foreground and background colours that affects readability. Text and interface elements need appropriate contrast for their purpose. Test actual combinations, including links and text over images, rather than relying on how colours look on one monitor.
Also called: color contrast, contrast ratio
A colour profile describes relationships used by a colour-management system to interpret and reproduce colour. ICC profiles provide a standardised way to exchange relevant information. Review the actual source and export handling when colours change between tools; a profile does not guarantee identical appearance on every uncontrolled customer screen.
Also called: Color profile, ICC profile
A colour space defines an organised range of colours and rules for representing them. Different spaces can describe colours with different coordinates and available ranges. Keep the chosen space clear when exchanging brand artwork or photographs; the same numerical values should not be assumed to mean the same colour in every space.
Also called: Color space
AbortSignal.any combines signals so its returned signal aborts when an input signal aborts, carrying the first relevant abort reason. An already aborted input produces an aborted result. Review the actual cancellation sources and customer feedback, so a combined signal does not obscure which supported reason affected the task.
Also called: AbortSignal.any()
A command-line interface accepts typed commands to operate a program or system. Developers use it for tasks such as builds and maintenance. Commands can change real services, so the project handover should identify the correct environment and supported workflow rather than leaving unexplained commands as instructions.
Also called: CLI, terminal command
A commit records a particular set of changes in version control with identifying information and a message. It can provide a reviewable point in a project’s history. Creating a commit does not necessarily publish the website; deployment depends on the project’s separate release process.
Also called: Git commit
A compiler translates code into another form for execution or further processing. The source language and target depend on the tool. A business should know which build tools its website needs and keep the source, configuration and release instructions together for future maintenance.
A component is a reusable part of an interface, such as a button or input field, with defined presentation and behaviour. Components can be combined into larger patterns. Review their states, accessible use and maintenance so that reuse produces a consistent working experience across the website.
Also called: UI component
A compression artefact is an unwanted visible change introduced when image information is reduced, particularly during lossy compression. It can make important detail look distorted. Compare the export with an appropriate original and inspect the actual display size; a smaller download is useful only when the image still communicates what the visitor needs.
Also called: Compression artifact
A compression dictionary supplies reference information used by a supported compressor and decoder. In Zstandard, a required dictionary can be supplied separately from the compressed frame. Document the actual exchange requirements; copying compressed data without a required matching dictionary can leave the recipient unable to recover it through the intended process.
Also called: Compressor dictionary
A compression level is a tool setting that selects a compression effort or speed trade-off within its supported range. Exact meanings vary by compressor; higher effort is not a universal promise about every input. Record the actual tool and settings, then compare delivered size, processing observations and recovered content for the business’s representative data.
Also called: Compressor level
CompressionStream is a web interface that compresses a stream through a supported compression format. It provides a stream transformation rather than a complete file-handover policy. Review the actual supported format, recovered output and receiving arrangement; using the interface does not by itself package filenames, protect the contents or verify that the correct business data was selected.
Also called: Compression Stream interface
A conditional request asks an HTTP server to perform an operation only when a specified condition is satisfied. Conditions can concern a representation’s version or modification date. They support tasks such as cache validation and protected updates. Confirm that both the client and receiving service implement the intended condition.
Congestion control adjusts sending behaviour to account for network congestion. TCP uses maintained algorithms for this purpose, with a congestion window limiting outstanding data. It differs from receiver flow control. Review the actual implementation and measured task rather than prescribe one algorithm as a universal website speed fix.
Also called: TCP congestion control
A connection pool manages reusable database connections for an application instead of creating a new connection for every operation. Limits and waiting behaviour need configuration. Ask the maintainer how the application handles demand and connection failures so that a busy service produces understandable outcomes.
Also called: database connection pooling
Constraint validation is the browser’s mechanism for checking supported form controls against declared rules, such as requiring a value or a suitable format. It can help visitors correct entries before submission. For a Jersey business, agree understandable rules and messages, then check the receiving system separately; browser validation does not prove information is true, delivered or safe to accept.
Also called: HTML constraint validation
A contact form lets a visitor send an enquiry through fields on a website to a receiving system.
Also called: enquiry form
A container runs an application process with its packaged dependencies in an isolated environment. It typically shares the host’s operating-system kernel, unlike a virtual machine with its own guest operating system. For a Jersey website, review the approved image, runtime configuration, persistent data and maintenance responsibilities before treating a container as a complete hosting service.
Also called: software container
A container image is a packaged set of files, libraries and configuration used to create a container. An image is separate from a running container and its persistent application data. Record the approved image version, update process and storage arrangements so rebuilding or replacing the runtime does not confuse code delivery with data recovery.
A CSS container query applies styles based on a relevant container condition. Size queries respond to the container’s dimensions, which can differ from the screen or viewport size. A Jersey business should review a reused feature in its actual page regions and supported conditions; a query rule alone does not establish readable content, correct states or consistent customer use.
Also called: CSS container query
Container query length units express dimensions relative to an eligible query container, such as cqi for a percentage of its inline size. If no eligible container is available, the documented fallback uses the corresponding small viewport unit. Review the actual context and result instead of assume every value always measures the intended component region.
Also called: cqi, cqw, cqh
A container registry stores and distributes container images through a service arrangement. It is different from running those images as application containers. Review image provenance, access permissions and the deployment version, and maintain a clear release process rather than assume that an uploaded image is already running safely on the business website.
Content design starts with what a person needs to know or do and chooses information, structure and presentation that help them.
A content inventory records the content within a defined scope, such as a website’s pages and assets. It helps a team see what exists before evaluating quality or deciding changes. Keep the scope and ownership clear, and distinguish listing the content from auditing whether it meets the business’s current needs.
Content marketing creates useful material to help and attract the people a business wants to serve.
Content negotiation lets HTTP select among available representations of a resource, such as different languages, image types or encodings. Request information can guide that choice. A Jersey website maintainer should check the actual selection and caching behaviour rather than assume that every visitor receives identical content.
Content Security Policy, or CSP, is a set of instructions that restrict relevant resource loading and behaviours in a supporting browser. It can add protection against certain attacks, including cross-site scripting, when appropriately configured. A Jersey business should review its actual website dependencies, test legitimate customer tasks and distinguish an enforced policy from report-only diagnostics.
Also called: CSP
The Content-Disposition header can indicate whether an HTTP response should be shown inline or treated as a download attachment. In multipart form content, it also identifies individual fields. It differs from Content-Type. Test the intended download or upload journey rather than infer file safety or successful processing from this header.
Also called: Content-Disposition
The Content-Encoding header identifies encodings applied to an HTTP representation so the recipient can decode it. It is commonly used for compression such as gzip. Content encoding differs from the media type and from transfer encoding. Ask the maintainer to verify the actual response and decoding behaviour.
Also called: Content-Encoding
The Content-Length header expresses the relevant HTTP content length in bytes, rather than visible letters or words. Message framing depends on the HTTP version and transfer arrangement. Treat it as a technical message value; it is separate from a business upload limit, a page speed result or total visit data usage.
Also called: Content-Length
The Content-Range response header describes how returned content relates to a complete representation, including the relevant range and overall size information. It is associated with partial-content and unsatisfied-range responses. Keep this technical range information separate from a customer record count or an application’s own pagination controls.
Also called: Content-Range
The Content-Type header identifies the media type of HTTP content, such as HTML, JSON or a particular image format. It can appear in requests and responses. The declared format should agree with the actual content and supported handling; a type label alone does not validate an upload or prove it safe.
Also called: Content-Type
A context window is the amount of information a language model can consider at one time, commonly measured in tokens. Instructions, conversation and supplied documents can share that allowance. A larger allowance does not prove the model used every detail correctly. Test the actual task and handling of long inputs.
Also called: Context length
Continuous delivery keeps software prepared for release through an organised automated process. Continuous deployment goes further by automatically releasing qualifying changes. Confirm which approach the project uses and whether a human approval or other gate stands between a successful build and the live site.
Also called: CD, continuous deployment
Continuous integration regularly combines and checks project changes using an automated process. Checks can catch build failures or important regressions before release. Their value depends on what they verify; a passing pipeline is not evidence that every customer task or factual claim has been reviewed.
Also called: CI
A conversion rate is the proportion of a defined audience or activity that completes a chosen action, such as an enquiry or purchase.
Also called: website conversion rate
Conversion tracking records selected actions that a business considers useful, such as a completed enquiry or purchase.
Also called: goal tracking
A conversion value is the value assigned or transmitted for a measured conversion. It may represent a transaction amount or an agreed estimate, according to the setup. Review its currency, included amounts and action definition before using the report to compare returns; a configured value is not automatically received revenue.
A conversion window defines the period after a relevant advertising interaction during which a conversion can be recorded under the platform’s rules. Changing it affects measurement. Compare the same relevant window and action definition before interpreting reports from different settings or platforms as equivalent outcomes.
Cookie consent is a person’s informed choice about cookies or similar device technologies where consent is required for the intended use.
Also called: cookie banner, consent banner
Cookies are small pieces of data stored by a browser for a website. They can support logins, preferences or tracking, depending on their purpose. They are not all equivalent. A Jersey business should understand which technologies its site uses and match its privacy information and choices to the actual setup.
Also called: website cookies
Copywriting is writing intended to explain an offer and encourage a relevant action, such as making an enquiry or booking a service.
Also called: website copy
Core Web Vitals are measurements of important parts of a web page’s user experience: loading, response to interaction and visual stability.
Also called: LCP, INP, CLS
A correlation ID is an identifier used to associate related activity across records or operations. Trace and span identifiers can support this relationship in an instrumented system. Agree what the actual application records and how staff can use a suitable reference to investigate an issue.
Also called: correlation identifier
CORS, or Cross-Origin Resource Sharing, is a browser mechanism using HTTP response headers to permit relevant cross-origin access to resources. It is separate from a service authenticating a caller. A Jersey business should configure the intended browser integration carefully and verify the service’s own access rules, rather than treat a CORS setting as complete protection.
Also called: Cross-Origin Resource Sharing
Cosine similarity compares the directions of two vectors using the cosine of their angle. It is one possible metric in vector search. A service may transform that value into a different displayed score. Review the actual metric and scoring rules before interpreting a number as a relevance threshold or confidence percentage.
Cost per conversion relates advertising cost to the conversions included in a report. It helps compare the cost of recorded outcomes. Check which actions count, the reporting period and attribution arrangement, and distinguish a submitted enquiry from a qualified lead or completed sale before using the figure to make a decision.
Also called: average CPA
CPC means cost per click in advertising.
Also called: cost per click
CPM means cost per thousand advertising impressions.
Also called: cost per thousand impressions
Crawl budget concerns the resources a crawler allocates to fetching a site. Server behaviour, URL volume and crawling demand can affect the arrangement. A business should investigate actual evidence before treating this as its main SEO problem; useful public content and appropriate discovery remain practical starting points.
Crawling is the process of fetching web content with automated software, often after discovering addresses through links or sitemaps.
Also called: web crawler, Googlebot
CRC32 is a thirty-two-bit cyclic redundancy check used in arrangements such as Gzip to help detect data corruption. It is separate from a cryptographic signature or proof of who supplied a file. Record the actual check and expected reference when reviewing a transfer; a matching check does not approve the file’s business contents.
Also called: 32-bit cyclic redundancy check
Document.createElement() creates an element for a supplied name. Creation is separate from placing it in the page and making the resulting feature useful. Ask which structure the application needs and how it inserts the element, then review the visible content and interaction against the approved customer task.
Also called: Document.createElement()
URL.createObjectURL() creates a blob URL for a supported object, letting a browser feature reference its contents through a URL. Review where the data originates and how the preview or export uses it. The generated identifier needs lifecycle management and does not itself upload the data or establish a lasting public website address.
Also called: URL.createObjectURL()
Document.createTextNode() creates a text node from a supplied string. The feature still needs to place that node appropriately and show useful content. Ask which wording the customer should receive and review the actual visible result, with representative values and surrounding controls checked against the intended task.
Also called: Document.createTextNode()
Credential stuffing uses previously obtained username and password combinations to try to access other accounts. Password reuse makes this relevant to ordinary business services. Use unique credentials and supported stronger authentication, and review how the service detects and handles suspicious sign-in activity.
CRM means customer relationship management and often refers to software that organises customer information, enquiries and follow-ups.
Also called: customer relationship management
A cron job is work scheduled using a time-based arrangement, commonly expressed with cron scheduling rules. The actual platform determines how it runs and handles missed or repeated execution. Record the schedule, time zone, responsible maintainer and how successful completion is verified.
Also called: scheduled job
Cross domain measurement helps Google Analytics connect recorded activity as a user moves between configured website domains. It is relevant when one journey spans separate sites, such as information and checkout. For a Jersey business, review the supported measurement setup, consent behaviour and actual navigation path before assuming that reports describe the complete journey correctly.
Also called: cross domain tracking, GA4 cross domain measurement
Cross-site request forgery, or CSRF, tricks a user’s browser into making an unwanted request to a website using the relevant credentials. It concerns whether a requested action was intended, alongside the application’s access checks. A Jersey business should have its developer review supported request protections and verify both legitimate tasks and rejected requests in an authorised test environment.
Also called: CSRF
Cross-site scripting, or XSS, involves malicious content executing in a website’s context. It can arise when untrusted information is handled unsafely in a page. Appropriate output handling, maintained application protections and additional browser policies have distinct roles. Review the actual implementation rather than treating one security header as complete protection.
Also called: XSS
The SubtleCrypto decrypt operation obtains plaintext from supplied encrypted data using the appropriate key and parameters. Inspect the supported implementation and access decisions together. The business should understand which authorised components can recover readable information, rather than assume the presence of ciphertext means nobody in the application can access it.
Also called: SubtleCrypto.decrypt()
The SubtleCrypto deriveBits operation derives a requested set of bits from base key material and returns them as data. It differs from deriving a CryptoKey object. Review the selected algorithm, purpose and handling of the output within the complete design, keeping sensitive material out of public diagnostic or handover content.
Also called: SubtleCrypto.deriveBits()
The SubtleCrypto deriveKey operation creates a secret key from base material using a selected derivation algorithm and desired properties. Different supported algorithms serve different purposes. Have a qualified maintainer review the actual inputs and design before treating every derivation method as an interchangeable solution to password storage or key management.
Also called: SubtleCrypto.deriveKey()
The SubtleCrypto digest operation computes a fixed-length hash output from supplied data using the selected algorithm. This API requires the input in memory rather than accepting a stream. Explain what the digest is used to check and where the trusted comparison comes from before giving it a broader authentication or confidentiality meaning.
Also called: SubtleCrypto.digest()
The SubtleCrypto encrypt operation transforms supplied plaintext into ciphertext using the relevant key and algorithm parameters. Review the complete design and key handling with a qualified maintainer. A successful encryption call is one technical result, so explain where the information remains readable and what protection the business actually expects.
Also called: SubtleCrypto.encrypt()
The SubtleCrypto exportKey operation produces a portable representation of an extractable key. Its output is not encrypted by that operation. Review why export is required and how the supported system protects the resulting material, rather than place it in public code, ordinary screenshots or customer-visible handover content.
Also called: SubtleCrypto.exportKey()
The SubtleCrypto generateKey operation creates a key or key pair for the selected algorithm, with relevant use and extractability choices. Keep those choices within the reviewed design. Generating a key does not establish its complete lifecycle, so document who manages it and how the supported system handles later access or replacement.
Also called: SubtleCrypto.generateKey()
The SubtleCrypto importKey operation converts supported external key material into a CryptoKey with the configured properties. Review the material’s trusted source, format and intended uses. A successful import establishes that the operation accepted the input; the broader system still needs an appropriate key-management and access design.
Also called: SubtleCrypto.importKey()
A CryptoKey represents a cryptographic key managed through the Web Crypto API, with properties describing its type, algorithm and permitted uses. Keep its purpose and management responsibility clear in the design. The object’s presence is insufficient evidence that the surrounding website handles access, secrets or customer information appropriately.
Also called: CryptoKey
The CryptoKey extractable property indicates whether the key can be exported or wrapped through the relevant API operations. It is one key-management setting. Review the actual lifecycle and surrounding access controls with the maintainer rather than treat this flag alone as a guarantee that the entire application protects its secrets.
Also called: CryptoKey.extractable
A cryptographic key pair contains related public and private keys for an asymmetric algorithm. Their roles depend on the supported operation. Keep key trust and private-key management explicit in the design, so the business understands which parties can perform the relevant action and how the receiving system establishes its verification context.
Also called: CryptoKeyPair
The CryptoKey usages property lists operations permitted for that key, such as signing or decryption. Review those permissions against the implemented feature’s purpose. Keep the chosen key role documented so the maintainer can inspect the design without assuming every key is interchangeable or appropriate for every cryptographic operation.
Also called: CryptoKey.usages
The Crypto randomUUID method generates a version-four UUID using a cryptographically secure random generator in a supported secure context. It supplies an identifier, whose role the application must define. Keep identification distinct from permission, and review the actual access decisions before claiming that a generated UUID makes a customer record secure.
Also called: crypto.randomUUID()
The SubtleCrypto sign operation creates a signature or supported message-authentication value from the relevant key, algorithm and data. Its meaning depends on the configured mechanism. Keep the covered input and key responsibility clear, and inspect the complete receiving workflow before treating a generated value as approval of a business transaction.
Also called: SubtleCrypto.sign()
The SubtleCrypto unwrapKey operation decrypts wrapped key material and imports it as a CryptoKey with the configured attributes. Review the trusted source, unwrapping key and intended uses together. The receiving operation needs an appropriate surrounding design, with documented management responsibility and supported handling of unsuccessful cases.
Also called: SubtleCrypto.unwrapKey()
The SubtleCrypto verify operation checks a supplied signature using the appropriate key, algorithm parameters and original data, returning a validity result. Review how the application establishes key trust and handles that result. Technical validity needs an interpretation tied to the covered message and the business action the system permits.
Also called: SubtleCrypto.verify()
The SubtleCrypto wrapKey operation exports an extractable key and encrypts its portable representation using a wrapping key. It combines related operations within a supported design. Review the wrapping key’s management and intended destination so the business understands what protection applies and how authorised recovery is meant to work.
Also called: SubtleCrypto.wrapKey()
Cryptographic randomness concerns values generated through a process suitable for security-sensitive purposes, rather than numbers that merely look varied. Browsers provide cryptographically strong random-value APIs. For a Jersey business, ask the maintainer to use the supported mechanism for the actual feature and review the surrounding design before assuming that a random-looking identifier automatically provides secrecy, authentication or secure access.
Also called: cryptographically secure randomness
A CSP nonce is an unpredictable value used to authorise relevant script or style resources under a Content Security Policy. The value needs appropriate generation and handling for each response. Review the actual rendering arrangement; a reused example value or automatically trusting every inserted element defeats the intended distinction.
Also called: Content Security Policy nonce
CSP report-only is a response-header arrangement for observing violations of a proposed Content Security Policy without enforcing that policy. A separately enforced policy can still apply. Check reporting configuration and representative tasks, and distinguish diagnostic evidence from the protections actually enforced for visitors.
Also called: Content-Security-Policy-Report-Only
A CSRF token is a value used within an application’s supported request-verification arrangement to help reject unwanted state-changing requests. Its generation, association and server-side verification matter. A field with that name is not enough: review the actual framework protection and test permitted and rejected behaviour in an authorised environment.
CSS is the language used to describe how webpage content is presented.
Also called: Cascading Style Sheets
The CSS align-items property sets group item alignment: on the cross axis in Flexbox and on the block axis within grid areas in Grid. Identify the actual layout context and inspect the rendered result. The setting does not by itself confirm readable content, correct grouping or the customer’s ability to use a control.
Also called: align-items
A CSS animation combines named keyframes describing style states with settings controlling how the sequence runs. It can include intermediate stages and repetition. For a Jersey business, explain the animation’s purpose, timing and final appearance, then review playback controls and reduced-motion behaviour where relevant; a moving graphic should support a clear customer task and usable content.
CSS break-after controls how page, column or region breaks should behave after a generated box. It applies within the relevant fragmentation arrangement. Inspect the actual next section and page boundary in the generated document; a rule’s presence alone does not establish that the final content order and layout meet the reader’s needs.
Also called: break-after
CSS break-before controls how page, column or region breaks should behave before a generated box. The selected value and rendering context matter. Review the actual output when trying to start an important section on a new page; a declared rule is separate from evidence that every supported renderer produced the intended document.
Also called: break-before
CSS break-inside controls how page, column or region breaks should behave inside a generated box. It can express a preference about keeping a content group together within the supported layout. Review the actual document, especially long groups that exceed available space, rather than assume every section can always remain on one page.
Also called: break-inside
The CSS container-name property assigns query container names used by container query rules. It identifies a context rather than establish every requirement for each supported query type on its own. Review the actual name, type and condition with the maintainer, then check the visible component behaviour in its intended placements.
Also called: container-name
The CSS container-type property establishes relevant container contexts for supported query types. A size query needs the appropriate arrangement rather than just an arbitrary named element. Have the maintainer identify the actual condition and supported response, then inspect the component’s content in the page regions where the website uses it.
Also called: container-type
The CSS :first page selector, used within @page, targets the first page of a printed document. It is distinct from :first-child, which selects an element in document structure. Review the actual first page and supported styling when applying special cover or opening-page treatment; a selector name does not establish a complete publication layout.
Also called: @page :first
The CSS fr unit expresses a flexible share of leftover space in a grid container. It is used for supported grid track sizing rather than represent a fixed pixel width or a percentage of every final item. Review the actual content and other sizing constraints before interpreting the resulting layout proportions.
Also called: fr unit
CSS fragmentation concerns how content breaks and flows across containers such as pages, columns and regions. Its controls address the placement of breaks and text continuation. Inspect the actual complete output with representative content; a page that looks good before printing can introduce different reading problems when divided into discrete document pages.
Also called: Content fragmentation
The CSS gap shorthand sets gaps between rows and columns in supported grid, flex and multi-column layouts. It is part of spacing within the arrangement rather than a complete page-spacing strategy. Inspect the actual content and neighbouring regions, so a gap value does not become a substitute for reviewing readability and grouping.
Also called: CSS gutters
CSS Grid is a website layout system for arranging content in rows and columns. It helps define relationships between page regions or repeated items, while the underlying document still needs a meaningful structure. A Jersey business should review real content at representative sizes, including reading and keyboard order; a tidy visual grid alone does not establish a usable customer experience.
Also called: CSS grid layout
The CSS :host selector selects the shadow host from CSS inside that shadow DOM. It has no effect when used outside a shadow DOM. Identify where the style belongs and inspect the actual component result; the familiar-looking selector name should not obscure the boundary and context required by the supported styling arrangement.
Also called: :host
CSS hyphenation uses the hyphens property to control how words may be hyphenated when text wraps across lines. It affects presentation rather than rewriting the underlying business explanation. Review representative text in the actual language and output arrangement, especially narrow columns, so the chosen treatment remains readable for the intended document or page.
Also called: hyphens property
CSS image-rendering influences the algorithm used when an image is scaled. Choices can suit different visual purposes, such as preserving a pixel-art appearance. It does not compress the downloaded file or add missing original detail. Review the supported value and actual scaled result instead of treating it as a universal sharpness switch.
Also called: image-rendering
The CSS justify-content property distributes space between and around content items along the main axis in Flexbox and the inline axis in Grid and multi-column arrangements. Its result depends on the layout context and available space. Review actual grouping and readable labels rather than assume the same declaration always produces the same visible arrangement.
Also called: justify-content
CSS keyframes define style waypoints in an animation sequence through the keyframes rule. They describe important appearances and intermediate stages, while other settings control playback. Ask what each stage communicates and inspect the resulting sequence, keeping the useful content and final page understandable when non-essential motion is reduced or replaced.
Also called: @keyframes
The CSS :left page selector, used within @page, targets left-hand pages in a printed document. Which side a page occupies depends on the document’s major writing direction. Check the actual renderer and output when designing facing-page presentation; do not assume the selector is simply a universal synonym for every even-numbered page.
Also called: @page :left
The CSS minmax function defines a size range for grid track sizing through supported minimum and maximum values. The actual settings and content still matter. Review long labels and available space with the maintainer instead of treat the function’s presence as a guarantee that every item will fit or remain readable.
Also called: minmax()
CSS object-fit controls how content such as an image fits within its element’s box. It helps a maintainer choose how the source and available space relate. Review the actual photo and layout at relevant widths: fitting content into a box is separate from choosing the download size or deciding which subject must remain visible.
Also called: object-fit
CSS object-position sets the alignment of content such as an image within its element’s box. It works alongside the fitting choice and can help place the visible subject appropriately. Check the result in the actual layout; positioning does not edit the original photograph or automatically identify the important subject.
Also called: object-position
CSS orphans sets a minimum number of lines from a block that should remain at the bottom of a page, region or column. It is distinct from the widows setting for the top of the next container. Review the actual renderer and resulting paragraphs rather than infer a complete print layout from one declared value.
Also called: orphans property
CSS overflow-wrap controls whether a browser may insert line breaks within an otherwise unbreakable string to avoid overflowing its line box. It can be relevant to long references and URLs. Review the actual text and surrounding layout; wrapping a value is separate from shortening it or proving that the underlying link works.
Also called: overflow-wrap, word-wrap
CSS page margins describe margins of the page box through supported descriptors in an @page rule. They concern paged output and are distinct from spacing around an ordinary screen element. Inspect the actual content area, edge spacing and complete document through the intended renderer rather than assume a margin value alone establishes a readable print.
Also called: @page margins
CSS page rotation uses the page-orientation descriptor to rotate a page after its layout. It differs from using the size descriptor to set the page’s layout dimensions and orientation. Ask the maintainer which operation is intended, then inspect the actual output rather than assume all orientation-related settings change content layout in the same way.
Also called: page-orientation descriptor
CSS page size uses the size descriptor within @page to describe the size and orientation of a page box. Supported values include named sizes and dimensions. Review the actual generated document and output settings; specifying a paper label is separate from verifying the available content area, readable layout and final physical print.
Also called: @page size
CSS paged media concerns arranging web content into discrete pages for print or other paged presentation. Page rules can describe dimensions, margins and related presentation, while fragmentation rules influence content breaks. A Jersey business should review the actual generated pages through the intended renderer; a specified rule does not guarantee identical support or output across every browser and tool.
Also called: Paged media
The CSS ::part selector targets a shadow-tree element exposed through a matching part attribute. It can form a supported styling interface across a component boundary. Have the maintainer document the available parts and review the actual design change; it is separate from unrestricted styling access to every internal node.
Also called: ::part
The CSS repeat function expresses a repeated pattern compactly, including track patterns in supported grid properties. It reduces repetition in the declaration rather than create approved business content automatically. Identify the actual repeated structure with the maintainer, then inspect the rendered items and their distinct information and destinations.
Also called: repeat()
The CSS :right page selector, used within @page, targets right-hand pages in a printed document. The document’s major writing direction helps determine the page side. Review the actual supported presentation and generated pages when applying facing-page rules, rather than assume a screen layout or a simple numbered-page convention fully describes the printed arrangement.
Also called: @page :right
The CSS rotate property expresses a rotation transform independently from the transform property. Review the element’s intended orientation and the information it communicates. A rotated icon or graphic should be inspected within its actual control and surrounding content, so the business approves a useful response instead of relying on movement alone to explain an action.
Also called: rotate property
The CSS scale property expresses a scaling transform independently from the transform property. It changes the element’s visual scale through that transformation. Review the effect’s purpose, surrounding content and reduced-motion arrangement where relevant, rather than assume an enlarged appearance improves the customer task or changes every aspect of layout as expected.
Also called: scale property
The CSS ::slotted selector targets matching elements assigned to a slot from styles within a shadow DOM. It targets elements rather than a bare text node. Review the actual supplied markup and desired appearance, then document the supported styling contract instead of assuming the selector reaches every nested content change.
Also called: ::slotted
CSS subgrid lets a nested grid use its parent grid’s tracks in the specified rows, columns or both. It can help align content across related items, while content and placement still need review. A Jersey business should identify which relationships the design shares and check long, missing and repeated content; aligned tracks alone do not establish a useful comparison.
Also called: Subgrid
A CSS transform changes an element’s visual coordinate space through operations such as rotation, scaling or translation. A transform can also affect stacking and containing-block behaviour. Review the actual element and surrounding layout with the maintainer, so the effect’s visual appearance is checked alongside relevant controls and positioning in the supported page.
Also called: transform property
Transform origin sets the origin used for an element’s transformations. This affects the point around which relevant visual changes are applied. Ask the maintainer to explain the chosen point and inspect the actual effect, particularly where scaling or rotation should remain clear beside other content and controls in the supported layout.
Also called: transform-origin
A CSS transition changes an eligible style property over time when its value changes, instead of showing the new value immediately. Its settings include the property, duration, timing function and delay. For a Jersey business, use that vocabulary to describe a specific interface response, then review the interaction, final state and reduced-motion behaviour customers actually experience.
The CSS translate property expresses a translation transform independently from the transform property. It changes the element’s presented position through that transformation. Keep the intended visual state and customer purpose clear, then inspect surrounding content and controls so the movement remains understandable within the actual supported layout.
Also called: translate property
CSS widows sets a minimum number of lines from a block that should appear at the top of a page, region or column. It concerns text fragmentation rather than missing content. Check support in the actual rendering process and inspect paragraph continuations; declaring the property does not prove every browser applies it identically.
Also called: widows property
CSV, or comma-separated values, is a text format commonly used to exchange records arranged in rows and fields. Import settings and field handling affect the result. A Jersey business should review a representative sample, agree each column’s meaning and verify the receiving records before relying on a customer or product import.
Also called: comma-separated values
CTR means click-through rate: clicks divided by impressions, expressed as a percentage, within the reporting system’s definitions. It describes how often a shown result or advert attracted a click. Check the channel and date range, and judge whether those clicks produced useful visits or enquiries.
Also called: click-through rate
The CSS cubic-bezier function describes a smooth easing curve for how an animated value progresses. It is part of the timing arrangement, rather than a complete animation specification. Compare the actual interface response and record the selected settings, keeping any claims about performance or business results tied to separate measured evidence.
Also called: cubic-bezier()
The current working directory is the directory associated with a running process as its working location. Tools can expose or change that location, affecting relevant relative-path interpretation. Record the actual process context during a website-file operation rather than assume the folder visible in a separate application is automatically the operation’s starting directory.
Also called: Working directory, CWD
Cursor pagination uses a position marker supplied or defined by an API to request another portion of a list. Its exact ordering and marker rules depend on the provider. Follow the documented sequence and test that the integration retrieves the intended records without accidental omissions or duplicates.
A custom dimension makes selected custom information available as a dimension in an analytics reporting arrangement. It can use relevant event parameters or user properties according to its scope. Define the business question and permitted values, then verify collection and reporting separately instead of assuming registration creates the underlying data.
A custom element is an HTML element whose behaviour a developer defines and registers through browser interfaces. It can represent a reusable website feature with an agreed content and interaction contract. A Jersey business should document the actual element, inputs and maintainer, then check its states and repeated uses; registration alone does not prove the customer task works.
Also called: Browser custom element
A custom element attributeChangedCallback responds to changes involving attributes named in its observedAttributes arrangement, receiving the name and old and new values. It is an implementation hook. Review the displayed consequence of supported input changes; receiving a notification alone does not prove the new business content was interpreted or presented correctly.
Also called: attributeChangedCallback
A custom element connectedCallback responds when the element is added to the document. It is a lifecycle hook where a developer can implement appropriate behaviour. Review repeated connections when relevant to the website; the callback being called does not itself establish that the feature is ready or that its customer task succeeded.
Also called: connectedCallback
CustomElementRegistry.define registers a custom element name with the constructor used for its implementation. The supported name and definition rules still apply. Ask the maintainer to connect this registration with the actual website feature; a definition is separate from approved content, available feature data and successful completion of the customer task.
Also called: customElements.define
A custom element disconnectedCallback responds when the element is removed from the document. It is part of managing the component lifecycle. Ask the maintainer to define any required cleanup and subsequent reuse; removal from the document is separate from deleting stored business information or reversing an earlier customer action.
Also called: disconnectedCallback
A custom element’s observedAttributes lists attribute names for which its implementation needs change notifications through attributeChangedCallback. It concerns selected implementation inputs rather than every possible change on a page. Document the actual supported values and editor process so business staff understand which settings affect the component’s intended behaviour.
Also called: observedAttributes
A custom element registry provides browser methods for registering and querying custom element definitions. It connects technical names with their implementations within the relevant registry. A handover should identify the actual feature and maintainer as well; the presence of a registry does not establish the usability of every registered component.
Also called: CustomElementRegistry
CustomElementRegistry.whenDefined returns a promise that fulfils when the named custom element is defined, including immediate fulfilment for an existing definition. It concerns that definition milestone. Review the actual feature readiness separately; completion of this wait does not prove that a data request or customer action has finished.
Also called: customElements.whenDefined
CustomEvent lets an application create an event carrying custom data. Its name and contents need a defined meaning within the feature. Ask which component sends it, what the receiver does and how the customer sees the outcome; choosing an event name such as complete does not establish that a business operation actually finished.
Also called: CustomEvent interface
CustomEvent.detail contains data supplied when the custom event was initialized. Review its fields and meaning with the component that receives it. A data object accompanying an event is useful implementation information, while the application still needs to interpret it appropriately and verify the customer outcome promised by the feature.
Also called: CustomEvent.detail
A custom metric in Google Analytics makes numerical event-parameter values available for analysis. Google describes custom metrics as event scoped. Keep the quantity, unit and collection point in its definition, so someone reviewing the result can distinguish an amount from a count and understand what the recorded number actually represents.
Also called: GA4 custom metric
The setCustomValidity method assigns a custom validity message to a supported input; an empty string clears that custom error. Demonstrate both the failed condition and its correction so an obsolete message does not keep blocking progress. Clearing the custom error is separate from satisfying every other applicable constraint.
Also called: setCustomValidity()
A customer journey describes the steps a person takes from noticing a business to deciding, buying and using its service. A funnel is one simplified way to model that progress. Look for practical obstacles, such as unclear prices or a difficult mobile form, rather than assuming every visitor follows the same route.
Also called: sales funnel, marketing funnel
A customised built-in element extends the behaviour of an existing standard HTML element through the supported custom-element arrangement. It differs from an autonomous element. Browser support needs review for the actual implementation; do not assume every custom-element mechanism has identical support or that inherited behaviour completes the intended website feature.
Also called: Customized built-in element
We build and look after websites for Jersey businesses, and we explain the choices in plain English.
See what we can help with →