v5.2.0

Update jQuery to v1.11.3
Fix h5bp/html5-boilerplate#1699
2026-01-12 16:18:35 -05:00 · 2015-04-30 23:54:24 +03:00 · 2015-04-30 22:00:30 +03:00 · 2015-04-16 19:27:57 +03:00 · 2015-04-16 10:31:02 +03:00 · 2015-04-16 06:32:33 +00:00
36 changed files with 458 additions and 389 deletions
--- a/.gitattributes
+++ b/.gitattributes
@@ -15,3 +15,7 @@
 *.sh    text eol=lf
 *.txt   text eol=lf
 *.xml   text eol=lf
+
+# Exclude the `.htaccess` file from GitHub's language statistics
+# https://github.com/github/linguist#using-gitattributes
+dist/.htaccess linguist-vendored
--- a/.travis.yml
+++ b/.travis.yml
@@ -4,29 +4,43 @@

 after_success:

-  # If the tests past, Travis will automatically download and execute
-  # the following script(s).
+  # Temporary workaround for:
+  # https://github.com/travis-ci/travis-ci/issues/929

-  # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  - python travis_after_all.py
+  - export $(cat .to_export_back) &> /dev/null
+  - |

-  # The `commit_build_changes.sh` script will run `npm run build`,
-  # and if that generates changes, it will commit them to the `master`
-  # branch:
-  #
-  #   * ensuring that the content from the `dist/` directory is always
-  #     in sync with the rest of the content
-  #
-  #   * removing the need to execute the build step locally everytime
-  #     a change is made (especially in the case of trivial changes
-  #     such as typos)
-  #
-  # Note: The `commit_build_changes.sh` script will only run if the
-  # commit was made to the `master` branch.
+      # If all the tests pass in all the runtimes, make Travis
+      # automatically download and execute the following script

-  - curl -sSL "https://raw.githubusercontent.com/h5bp-bot/scripts/0.6.0/commit_build_changes.sh" |
-      bash -s -- --branch "master"
-                 --commands "npm install && npm run build"
-                 --commit-message "Update content from the \`dist\` directory [skip ci]"
+      if [ "$BUILD_LEADER" == "YES" ]; then
+        if [ "$BUILD_AGGREGATE_STATUS" == "others_succeeded" ]; then \
+
+          # Clean up helper files
+          rm -rf travis_after_all.py .to_export_back && \
+
+          # The `commit_build_changes.sh` script will run the build,
+          # and if that generates changes, it will commit them to the
+          # `master` branch:
+          #
+          #   * ensuring that the content from the `dist/` directory
+          #     is always in sync with the rest of the content
+          #
+          #   * removing the need to execute the build step locally
+          #     everytime a change is made (especially in the case
+          #     of trivial changes such as typos)
+          #
+          # Note: The `commit_build_changes.sh` script will only run
+          # if the commit was made to the `master` branch.
+
+          curl -sSL "https://raw.githubusercontent.com/h5bp-bot/scripts/0.6.1/commit_build_changes.sh" |
+              bash -s -- --branch "master" \
+                         --commands "npm install && npm run build" \
+                         --commit-message "Update content from the \`dist\` directory [skip ci]";
+
+        fi
+      fi

 env:
  global:
@@ -51,7 +65,7 @@ env:
    #   * GitHub access token, see:
    #     https://help.github.com/articles/creating-an-access-token-for-command-line-use/

-    - secure: "mkLhS1ajE7gYNUdHsAfcW6vU9THb2DmPA01PQlXz2y/F3Ld0IwEpqrGGLWyg9ZSYr0g7xq+M46pPiZsfZgCYSLv0flA/RFLmiXcVQfap3BZf8sqTtE3M9AHuy9sxUgus2M9GA7Wupws2KC2PXZM0OT12GSSOCYQCLD3ySD4b4mE="
+    - secure: "OQnRHkXKdvSujTPm0DSXJFrso0zKltkso0e8zF/2GLI7ouv60ELHhYCrWFuoeefSJFbiPeH/9GXnTAv7y+gC08Ba/DSlXGaHl4db5xU/7AazzQR4YaTks6z0CfvlftdlimGOY27tuDU8hMfqHJKybJGcEvFKCVJms/7udYYh+CA="

 git:
  depth: 10
@@ -59,4 +73,10 @@ git:
 language: node_js

 node_js:
-  - "0.10"
+  - "iojs"
+  - "0.12"
+
+script:
+  - curl -sSLo travis_after_all.py https://raw.github.com/dmakhno/travis_after_all/master/travis_after_all.py
+
+sudo: false
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,26 @@
-### 5.0
+### 5.2.0 (May 1, 2015)
+
+* Update jQuery to `v1.11.3`
+  ([#1699](https://github.com/h5bp/html5-boilerplate/issues/1699)).
+* Deprecate protocol-relative URLs
+  ([#1694](https://github.com/h5bp/html5-boilerplate/issues/1694)).
+* Update high resolution media query
+  ([#1474](https://github.com/h5bp/html5-boilerplate/issues/1474)).
+* Update Apache Server Configs to `v2.14.0`.
+
+### 5.1.0 (April 1, 2015)
+
+* Update Normalize.css to `v3.0.3`.
+* Use `https://` in the Google Universal Analytics snippet
+  ([eee759b](https://github.com/h5bp/html5-boilerplate/commit/eee759bfe175e850bbc8e4ad0682ec4fe4bd05d6)).
+* Remove the `visibility: hidden` declaration from `.hidden`
+  ([#1663](https://github.com/h5bp/html5-boilerplate/issues/1663)).
+* Use `<meta http-equiv="x-ua-compatible" content="ie=edge">`<br>
+  instead of `<meta http-equiv="X-UA-Compatible" content="IE=edge">`
+  ([#1656](https://github.com/h5bp/html5-boilerplate/issues/1656)).
+* Update Apache Server Configs to `v2.13.0`.
+
+### 5.0.0 (February 1, 2015)

 * Update to jQuery 1.11.2.
 * Update Apache Server Configs to v2.11.0.
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,6 +1,6 @@
 # Contributing to HTML5 Boilerplate

-♥ [HTML5 Boilerplate](http://html5boilerplate.com) and want to get involved?
+♥ [HTML5 Boilerplate](https://html5boilerplate.com) and want to get involved?
 Thanks! There are plenty of ways you can help!

 Please take a moment to review this document in order to make the contribution
@@ -48,7 +48,7 @@ Guidelines for bug reports:
   latest `master` or development branch in the repository.

 3. **Isolate the problem** &mdash; ideally create a [reduced test
-   case](http://css-tricks.com/6263-reduced-test-cases/) and a live example.
+   case](https://css-tricks.com/reduced-test-cases/) and a live example.

 A good bug report shouldn't leave others needing to chase you up for more
 information. Please try to be as detailed as possible in your report. What is
@@ -102,7 +102,7 @@ accurate comments, etc.) and any other requirements (such as test coverage).
 Adhering to the following process is the best way to get your work
 included in the project:

-1. [Fork](https://help.github.com/articles/fork-a-repo) the project, clone your
+1. [Fork](https://help.github.com/articles/fork-a-repo/) the project, clone your
   fork, and configure the remotes:

   ```bash
@@ -131,7 +131,7 @@ included in the project:
 4. Commit your changes in logical chunks. Please adhere to these [git commit
   message guidelines](http://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html)
   or your code is unlikely be merged into the main project. Use Git's
-   [interactive rebase](https://help.github.com/articles/about-git-rebase)
+   [interactive rebase](https://help.github.com/articles/about-git-rebase/)
   feature to tidy up your commits before making them public.

 5. Locally merge (or rebase) the upstream development branch into your topic branch:
@@ -149,5 +149,5 @@ included in the project:
 7. [Open a Pull Request](https://help.github.com/articles/using-pull-requests/)
    with a clear title and description.

-**IMPORTANT**: By submitting a patch, you agree to allow the project owners to
-license your work under the terms of the [MIT License](LICENSE.md).
+**IMPORTANT**: By submitting a patch, you agree to allow the project
+owners to license your work under the terms of the [MIT License](LICENSE.txt).
--- a/LICENSE.txt
+++ b/LICENSE.txt
--- a/README.md
+++ b/README.md
@@ -1,17 +1,18 @@
-# [HTML5 Boilerplate](http://html5boilerplate.com)
+# [HTML5 Boilerplate](https://html5boilerplate.com)

 [![Build Status](https://travis-ci.org/h5bp/html5-boilerplate.svg)](https://travis-ci.org/h5bp/html5-boilerplate)
 [![devDependency Status](https://david-dm.org/h5bp/html5-boilerplate/dev-status.svg)](https://david-dm.org/h5bp/html5-boilerplate#info=devDependencies)

-HTML5 Boilerplate is a professional front-end template for building fast,
-robust, and adaptable web apps or sites.
+HTML5 Boilerplate is a professional front-end template for building
+fast, robust, and adaptable web apps or sites.

-This project is the product of many years of iterative development and combined
-community knowledge. It does not impose a specific development philosophy or
-framework, so you're free to architect your code in the way that you want.
+This project is the product of many years of iterative development and
+combined community knowledge. It does not impose a specific development
+philosophy or framework, so you're free to architect your code in the
+way that you want.

+* Homepage: [https://html5boilerplate.com](https://html5boilerplate.com)
 * Source: [https://github.com/h5bp/html5-boilerplate](https://github.com/h5bp/html5-boilerplate)
-* Homepage: [http://html5boilerplate.com](http://html5boilerplate.com)
 * Twitter: [@h5bp](https://twitter.com/h5bp)


@@ -20,47 +21,72 @@ framework, so you're free to architect your code in the way that you want.
 Choose one of the following options:

 1. Download the latest stable release from
-   [html5boilerplate.com](http://html5boilerplate.com/) or a custom build from
-   [Initializr](http://www.initializr.com).
+   [html5boilerplate.com](https://html5boilerplate.com/) or create a
+   custom build using [Initializr](http://www.initializr.com).
 2. Clone the git repo — `git clone
-   https://github.com/h5bp/html5-boilerplate.git` - and checkout the [tagged
-   release](https://github.com/h5bp/html5-boilerplate/releases) you'd like to
-   use.
+   https://github.com/h5bp/html5-boilerplate.git` - and checkout the
+   [tagged release](https://github.com/h5bp/html5-boilerplate/releases)
+   you'd like to use.


 ## Features

 * HTML5 ready. Use the new elements with confidence.
-* Cross-browser compatible (Chrome, Firefox, IE8+, Opera, Safari).
 * Designed with progressive enhancement in mind.
-* Includes [Normalize.css](http://necolas.github.com/normalize.css/) for CSS
-  normalizations and common bug fixes.
-* The latest [jQuery](https://jquery.com/) via CDN, with a local fallback.
-* The latest [Modernizr](http://modernizr.com/) build for feature detection.
+* Includes:
+  * [`Normalize.css`](https://necolas.github.com/normalize.css/)
+    for CSS normalizations and common bug fixes
+  * [`jQuery`](https://jquery.com/) via CDN, with a local fallback
+  * A custom build of  [`Modernizr`](http://modernizr.com/) for feature
+    detection
+  * [`Apache Server Configs`](https://github.com/h5bp/server-configs-apache)
+    that, among other, improve the web site's performance and security
 * Placeholder CSS Media Queries.
-* Useful CSS helpers.
-* Default print CSS, performance optimized.
-* Protection against any stray `console` statements causing JavaScript errors
-  in older browsers.
-* An optimized Google Analytics snippet.
-* Apache server caching, compression, and other configuration defaults for
-  Grade-A performance.
+* Useful CSS helper classes.
+* Default print styles, performance optimized.
+* An optimized version of the Google Universal Analytics snippet.
+* Protection against any stray `console` statements causing JavaScript
+  errors in older browsers.
 * "Delete-key friendly." Easy to strip out parts you don't need.
 * Extensive inline and accompanying documentation.

-[HTML5 Boilerplate v4 provides legacy browser
-support](https://github.com/h5bp/html5-boilerplate/tree/v4) (IE 6+, Firefox
-3.6+, Safari 4+), but is no longer actively developed.
+
+## Browser support
+
+* Chrome *(latest 2)*
+* Firefox *(latest 2)*
+* Internet Explorer 8+
+* Opera *(latest 2)*
+* Safari *(latest 2)*
+
+*This doesn't mean that HTML5 Boilerplate cannot be used in older browsers,
+just that we'll ensure compatibility with the ones mentioned above.*
+
+If you need legacy browser support (IE 6+, Firefox 3.6+, Safari 4+) you
+can use [HTML5 Boilerplate v4](https://github.com/h5bp/html5-boilerplate/tree/v4),
+but is no longer actively developed.
+

 ## Documentation

-Take a look at the [documentation table of contents](dist/doc/TOC.md). This
-documentation is bundled with the project, which makes it readily available for
-offline reading and provides a useful starting point for any documentation you
-want to write about your project.
+Take a look at the [documentation table of contents](dist/doc/TOC.md).
+This documentation is bundled with the project, which makes it readily
+available for offline reading and provides a useful starting point for
+any documentation you want to write about your project.


 ## Contributing

-Anyone and everyone is welcome to [contribute](CONTRIBUTING.md). Hundreds of
-developers have helped make the HTML5 Boilerplate what it is today.
+Hundreds of developers have helped make the HTML5 Boilerplate what it is
+today. Anyone and everyone is welcome to [contribute](CONTRIBUTING.md),
+however, if you decide to get involved, please take a moment to review
+the [guidelines](CONTRIBUTING.md):
+
+* [Bug reports](CONTRIBUTING.md#bugs)
+* [Feature requests](CONTRIBUTING.md#features)
+* [Pull requests](CONTRIBUTING.md#pull-requests)
+
+
+## License
+
+The code is available under the [MIT license](LICENSE.txt).
--- a/dist/.htaccess
+++ b/dist/.htaccess
@@ -1,4 +1,4 @@
-# Apache Server Configs v2.11.0 | MIT License
+# Apache Server Configs v2.14.0 | MIT License
 # https://github.com/h5bp/server-configs-apache

 # (!) Using `.htaccess` files slows down Apache, therefore, if you have
@@ -119,17 +119,21 @@ Options -MultiViews
 # designed for older versions of Internet Explorer, you might want to
 # consider enabling `Enterprise Mode` throughout your company.
 #
-# http://msdn.microsoft.com/en-us/library/ie/bg182625.aspx#docmode
+# https://msdn.microsoft.com/en-us/library/ie/bg182625.aspx#docmode
 # http://blogs.msdn.com/b/ie/archive/2014/04/02/stay-up-to-date-with-enterprise-mode-for-internet-explorer-11.aspx

 <IfModule mod_headers.c>
+
    Header set X-UA-Compatible "IE=edge"
+
    # `mod_headers` cannot match based on the content-type, however,
    # the `X-UA-Compatible` response header should be send only for
    # HTML documents and not for the other resources.
-    <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|woff2?|xloc|xml|xpi)$">
+
+    <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
        Header unset X-UA-Compatible
    </FilesMatch>
+
 </IfModule>

 # ----------------------------------------------------------------------
@@ -138,7 +142,7 @@ Options -MultiViews

 # Allow cookies to be set from iframes in Internet Explorer.
 #
-# http://msdn.microsoft.com/en-us/library/ms537343.aspx
+# https://msdn.microsoft.com/en-us/library/ms537343.aspx
 # http://www.w3.org/TR/2000/CR-P3P-20001215/

 # <IfModule mod_headers.c>
@@ -163,10 +167,12 @@ Options -MultiViews

  # Data interchange

+    AddType application/atom+xml                        atom
    AddType application/json                            json map topojson
    AddType application/ld+json                         jsonld
+    AddType application/rss+xml                         rss
    AddType application/vnd.geo+json                    geojson
-    AddType application/xml                             atom rdf rss xml
+    AddType application/xml                             rdf xml


  # JavaScript
@@ -179,39 +185,9 @@ Options -MultiViews

  # Manifest files

-    # If you are providing a web application manifest file (see
-    # the specification: https://w3c.github.io/manifest/), it is
-    # recommended that you serve it with the `application/manifest+json`
-    # media type.
-    #
-    # Because the web application manifest file doesn't have its
-    # own unique file extension, you can set its media type either
-    # by matching:
-    #
-    # 1) the exact location of the file (this can be done using a
-    #    directive such as `<Location>`, but it will NOT work in
-    #    the `.htaccess` file, so you will have to do it in the main
-    #    server configuration file or inside of a `<VirtualHost>`
-    #    container)
-    #
-    #    e.g.:
-    #
-    #       <Location "/.well-known/manifest.json">
-    #           AddType application/manifest+json               json
-    #       </Location>
-    #
-    # 2) the filename (this can be problematic as you will need to
-    #    ensure that you don't have any other file with the same name
-    #    as the one you gave to your web application manifest file)
-    #
-    #    e.g.:
-    #
-    #       <Files "manifest.json">
-    #           AddType application/manifest+json               json
-    #       </Files>
-
+    AddType application/manifest+json                   webmanifest
    AddType application/x-web-app-manifest+json         webapp
-    AddType text/cache-manifest                         appcache manifest
+    AddType text/cache-manifest                         appcache


  # Media files
@@ -219,12 +195,12 @@ Options -MultiViews
    AddType audio/mp4                                   f4a f4b m4a
    AddType audio/ogg                                   oga ogg opus
    AddType image/bmp                                   bmp
+    AddType image/svg+xml                               svg svgz
    AddType image/webp                                  webp
    AddType video/mp4                                   f4v f4p m4v mp4
    AddType video/ogg                                   ogv
    AddType video/webm                                  webm
    AddType video/x-flv                                 flv
-    AddType image/svg+xml                               svg svgz

    # Serving `.ico` image files with a different media type
    # prevents Internet Explorer from displaying then as images:
@@ -291,11 +267,13 @@ AddDefaultCharset utf-8
                     .js \
                     .json \
                     .jsonld \
+                     .manifest \
                     .rdf \
                     .rss \
                     .topojson \
                     .vtt \
                     .webapp \
+                     .webmanifest \
                     .xloc \
                     .xml
 </IfModule>
@@ -327,7 +305,7 @@ AddDefaultCharset utf-8
 #
 # (4) Some cloud hosting services will require you set `RewriteBase`.
 #
-#     http://www.rackspace.com/knowledge_center/frequently-asked-question/why-is-modrewrite-not-working-on-my-site
+#     https://www.rackspace.com/knowledge_center/frequently-asked-question/why-is-modrewrite-not-working-on-my-site
 #     https://httpd.apache.org/docs/current/mod/mod_rewrite.html#rewritebase
 #
 # (5) Depending on how your server is set up, you may also need to
@@ -335,6 +313,9 @@ AddDefaultCharset utf-8
 #     the rewrite engine.
 #
 #     https://httpd.apache.org/docs/current/mod/mod_rewrite.html#rewriteoptions
+#
+# (6) Set %{ENV:PROTO} variable, to allow rewrites to redirect with the
+#     appropriate schema automatically (http or https).

 <IfModule mod_rewrite.c>

@@ -353,6 +334,12 @@ AddDefaultCharset utf-8
    # (5)
    # RewriteOptions <options>

+    # (6)
+    RewriteCond %{HTTPS} =on
+    RewriteRule ^ - [env=proto:https]
+    RewriteCond %{HTTPS} !=on
+    RewriteRule ^ - [env=proto:http]
+
 </IfModule>

 # ----------------------------------------------------------------------
@@ -394,7 +381,7 @@ AddDefaultCharset utf-8
    RewriteEngine On
    RewriteCond %{HTTPS} !=on
    RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
-    RewriteRule ^ http://%1%{REQUEST_URI} [R=301,L]
+    RewriteRule ^ %{ENV:PROTO}://%1%{REQUEST_URI} [R=301,L]
 </IfModule>

 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
@@ -410,7 +397,7 @@ AddDefaultCharset utf-8
 #     RewriteCond %{HTTP_HOST} !^www\. [NC]
 #     RewriteCond %{SERVER_ADDR} !=127.0.0.1
 #     RewriteCond %{SERVER_ADDR} !=::1
-#     RewriteRule ^ http://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
+#     RewriteRule ^ %{ENV:PROTO}://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
 # </IfModule>


@@ -453,13 +440,17 @@ AddDefaultCharset utf-8
 # https://www.owasp.org/index.php/Clickjacking

 # <IfModule mod_headers.c>
+
 #     Header set X-Frame-Options "DENY"
+
 #     # `mod_headers` cannot match based on the content-type, however,
 #     # the `X-Frame-Options` response header should be send only for
 #     # HTML documents and not for the other resources.
-#     <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|woff2?|xloc|xml|xpi)$">
+
+#     <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
 #         Header unset X-Frame-Options
 #     </FilesMatch>
+
 # </IfModule>

 # ----------------------------------------------------------------------
@@ -472,24 +463,29 @@ AddDefaultCharset utf-8
 # This can be done by setting a `Content Security Policy` which
 # whitelists trusted sources of content for your website.
 #
-# The example header below allows ONLY scripts that are loaded from the
-# current website's origin (no inline scripts, no CDN, etc). That almost
-# certainly won't work as-is for your website!
+# The example header below allows ONLY scripts that are loaded from
+# the current website's origin (no inline scripts, no CDN, etc).
+# That almost certainly won't work as-is for your website!
 #
-# For more details on how to craft a reasonable policy for your website,
-# read: http://www.html5rocks.com/en/tutorials/security/content-security-policy/
-# (or the specification: http://www.w3.org/TR/CSP11/). Also, to make
-# things easier, you can use an online CSP header generator such as:
-# http://cspisawesome.com/.
+# To make things easier, you can use an online CSP header generator
+# such as: http://cspisawesome.com/.
+#
+# http://content-security-policy.com/
+# http://www.html5rocks.com/en/tutorials/security/content-security-policy/
+# http://www.w3.org/TR/CSP11/).

 # <IfModule mod_headers.c>
+
 #     Header set Content-Security-Policy "script-src 'self'; object-src 'self'"
+
 #     # `mod_headers` cannot match based on the content-type, however,
 #     # the `Content-Security-Policy` response header should be send
 #     # only for HTML documents and not for the other resources.
-#     <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|woff2?|xloc|xml|xpi)$">
+
+#     <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
 #         Header unset Content-Security-Policy
 #     </FilesMatch>
+
 # </IfModule>

 # ----------------------------------------------------------------------
@@ -586,7 +582,7 @@ AddDefaultCharset utf-8
 # http://blogs.msdn.com/b/ieinternals/archive/2014/08/18/hsts-strict-transport-security-attacks-mitigations-deployment-https.aspx

 # <IfModule mod_headers.c>
-#     Header set Strict-Transport-Security "max-age=16070400; includeSubDomains"
+#     Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
 # </IfModule>

 # ----------------------------------------------------------------------
@@ -602,7 +598,7 @@ AddDefaultCharset utf-8
 #
 # http://www.slideshare.net/hasegawayosuke/owasp-hasegawa
 # http://blogs.msdn.com/b/ie/archive/2008/07/02/ie8-security-part-v-comprehensive-protection.aspx
-# http://msdn.microsoft.com/en-us/library/ie/gg622941.aspx
+# https://msdn.microsoft.com/en-us/library/ie/gg622941.aspx
 # https://mimesniff.spec.whatwg.org/

 <IfModule mod_headers.c>
@@ -635,7 +631,7 @@ AddDefaultCharset utf-8
 #     thereby, it's better to inform browsers to prevent the rendering
 #     of the page altogether, instead of attempting to modify it.
 #
-#     http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities
+#     https://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities
 #
 # (!) Do not rely on the XSS filter to prevent XSS attacks! Ensure that
 #     you are taking all possible measures to prevent XSS attacks, the
@@ -646,20 +642,58 @@ AddDefaultCharset utf-8
 # https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29

 # <IfModule mod_headers.c>
+
 #     #                           (1)    (2)
 #     Header set X-XSS-Protection "1; mode=block"
+
 #     # `mod_headers` cannot match based on the content-type, however,
 #     # the `X-XSS-Protection` response header should be send only for
 #     # HTML documents and not for the other resources.
-#     <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|woff2?|xloc|xml|xpi)$">
+
+#     <FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
 #         Header unset X-XSS-Protection
 #     </FilesMatch>
+
 # </IfModule>

+# ----------------------------------------------------------------------
+# | Server-side technology information                                 |
+# ----------------------------------------------------------------------
+
+# Remove the `X-Powered-By` response header that:
+#
+#  * is set by some frameworks and server-side languages
+#    (e.g.: ASP.NET, PHP), and its value contains information
+#    about them (e.g.: their name, version number)
+#
+#  * doesn't provide any value as far as users are concern,
+#    and in some cases, the information provided by it can
+#    be used by attackers
+#
+# (!) If you can, you should disable the `X-Powered-By` header from the
+# language / framework level (e.g.: for PHP, you can do that by setting
+# `expose_php = off` in `php.ini`)
+#
+# https://php.net/manual/en/ini.core.php#ini.expose-php
+
+<IfModule mod_headers.c>
+    Header unset X-Powered-By
+</IfModule>
+
 # ----------------------------------------------------------------------
 # | Server software information                                        |
 # ----------------------------------------------------------------------

+# Prevent Apache from adding a trailing footer line containing
+# information about the server to the server-generated documents
+# (e.g.: error messages, directory listings, etc.)
+#
+# https://httpd.apache.org/docs/current/mod/core.html#serversignature
+
+ServerSignature Off
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
 # Prevent Apache from sending in the `Server` response header its
 # exact version number, the description of the generic OS-type or
 # information about its compiled-in modules.
@@ -669,7 +703,7 @@ AddDefaultCharset utf-8
 #
 # https://httpd.apache.org/docs/current/mod/core.html#servertokens

-# ServerTokens Prod
+#ServerTokens Prod


 # ######################################################################
@@ -816,9 +850,12 @@ FileETag None
    ExpiresDefault                                      "access plus 1 month"

  # CSS
+
    ExpiresByType text/css                              "access plus 1 year"

+
  # Data interchange
+
    ExpiresByType application/atom+xml                  "access plus 1 hour"
    ExpiresByType application/rdf+xml                   "access plus 1 hour"
    ExpiresByType application/rss+xml                   "access plus 1 hour"
@@ -830,35 +867,45 @@ FileETag None
    ExpiresByType application/xml                       "access plus 0 seconds"
    ExpiresByType text/xml                              "access plus 0 seconds"

+
  # Favicon (cannot be renamed!) and cursor images
+
    ExpiresByType image/vnd.microsoft.icon              "access plus 1 week"
    ExpiresByType image/x-icon                          "access plus 1 week"

  # HTML
+
    ExpiresByType text/html                             "access plus 0 seconds"

+
  # JavaScript
+
    ExpiresByType application/javascript                "access plus 1 year"
    ExpiresByType application/x-javascript              "access plus 1 year"
    ExpiresByType text/javascript                       "access plus 1 year"

-  # Manifest files
-    ExpiresByType application/manifest+json             "access plus 1 year"

+  # Manifest files
+
+    ExpiresByType application/manifest+json             "access plus 1 week"
    ExpiresByType application/x-web-app-manifest+json   "access plus 0 seconds"
    ExpiresByType text/cache-manifest                   "access plus 0 seconds"

+
  # Media files
+
    ExpiresByType audio/ogg                             "access plus 1 month"
    ExpiresByType image/bmp                             "access plus 1 month"
    ExpiresByType image/gif                             "access plus 1 month"
    ExpiresByType image/jpeg                            "access plus 1 month"
    ExpiresByType image/png                             "access plus 1 month"
    ExpiresByType image/svg+xml                         "access plus 1 month"
+    ExpiresByType image/webp                            "access plus 1 month"
    ExpiresByType video/mp4                             "access plus 1 month"
    ExpiresByType video/ogg                             "access plus 1 month"
    ExpiresByType video/webm                            "access plus 1 month"

+
  # Web fonts

    # Embedded OpenType (EOT)
@@ -879,7 +926,9 @@ FileETag None
    # Web Open Font Format (WOFF) 2.0
    ExpiresByType application/font-woff2                "access plus 1 month"

+
  # Other
+
    ExpiresByType text/x-cross-domain-policy            "access plus 1 week"

 </IfModule>
@@ -931,5 +980,5 @@ FileETag None
 # <IfModule mod_rewrite.c>
 #     RewriteEngine On
 #     RewriteCond %{REQUEST_FILENAME} !-f
-#     RewriteRule ^(.+)\.(\d+)\.(bmp|css|cur|gif|ico|jpe?g|js|png|svgz?|webp)$ $1.$3 [L]
+#     RewriteRule ^(.+)\.(\d+)\.(bmp|css|cur|gif|ico|jpe?g|js|png|svgz?|webp|webmanifest)$ $1.$3 [L]
 # </IfModule>
--- a/dist/LICENSE.txt
+++ b/dist/LICENSE.txt
@@ -0,0 +1,19 @@
+Copyright (c) HTML5 Boilerplate
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
--- a/dist/browserconfig.xml
+++ b/dist/browserconfig.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<!-- Please read: http://msdn.microsoft.com/en-us/library/ie/dn455106.aspx -->
+<!-- Please read: https://msdn.microsoft.com/en-us/library/ie/dn455106.aspx -->
 <browserconfig>
    <msapplication>
        <tile>
--- a/dist/css/main.css
+++ b/dist/css/main.css
@@ -1,4 +1,4 @@
-/*! HTML5 Boilerplate v5.0.0 | MIT License | http://h5bp.com/ */
+/*! HTML5 Boilerplate v5.2.0 | MIT License | https://html5boilerplate.com/ */

 /*
 * What follows is the result of much research on cross-browser styling.
@@ -117,12 +117,10 @@ textarea {

 /*
 * Hide visually and from screen readers:
- * http://juicystudio.com/article/screen-readers-display-none.php
 */

 .hidden {
    display: none !important;
-    visibility: hidden;
 }

 /*
@@ -198,8 +196,8 @@ textarea {
 }

@media print,
-       (-o-min-device-pixel-ratio: 5/4),
       (-webkit-min-device-pixel-ratio: 1.25),
+       (min-resolution: 1.25dppx),
       (min-resolution: 120dpi) {
    /* Style adjustments for high resolution devices */
 }
--- a/dist/css/normalize.css
+++ b/dist/css/normalize.css
@@ -1,9 +1,9 @@
-/*! normalize.css v3.0.2 | MIT License | git.io/normalize */
+/*! normalize.css v3.0.3 | MIT License | github.com/necolas/normalize.css */

 /**
 * 1. Set default font family to sans-serif.
- * 2. Prevent iOS text size adjust after orientation change, without disabling
- *    user zoom.
+ * 2. Prevent iOS and IE text size adjust after device orientation change,
+ *    without disabling user zoom.
 */

 html {
@@ -71,7 +71,7 @@ audio:not([controls]) {

 /**
 * Address `[hidden]` styling not present in IE 8/9/10.
- * Hide the `template` element in IE 8/9/11, Safari, and Firefox < 22.
+ * Hide the `template` element in IE 8/9/10/11, Safari, and Firefox < 22.
 */

 [hidden],
@@ -91,7 +91,8 @@ a {
 }

 /**
- * Improve readability when focused and also mouse hovered in all browsers.
+ * Improve readability of focused elements when they are also in an
+ * active/hover state.
 */

 a:active,
@@ -209,7 +210,6 @@ figure {
 */

 hr {
-  -moz-box-sizing: content-box;
  box-sizing: content-box;
  height: 0;
 }
@@ -350,15 +350,12 @@ input[type="number"]::-webkit-outer-spin-button {

 /**
 * 1. Address `appearance` set to `searchfield` in Safari and Chrome.
- * 2. Address `box-sizing` set to `border-box` in Safari and Chrome
- *    (include `-moz` to future-proof).
+ * 2. Address `box-sizing` set to `border-box` in Safari and Chrome.
 */

 input[type="search"] {
  -webkit-appearance: textfield; /* 1 */
-  -moz-box-sizing: content-box;
-  -webkit-box-sizing: content-box; /* 2 */
-  box-sizing: content-box;
+  box-sizing: content-box; /* 2 */
 }

 /**
--- a/dist/doc/TOC.md
+++ b/dist/doc/TOC.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com)
+[HTML5 Boilerplate homepage](https://html5boilerplate.com)

 ## Getting started

@@ -23,7 +23,7 @@ The [H5BP organization](https://github.com/h5bp) maintains several projects
 that complement HTML5 Boilerplate, projects that can help you improve different
 aspects of your website/web app (e.g.: the performance, security, etc.).

-* [Server Configs](https://github.com/h5bp/server-configs) — Fast & smart
-  configurations for web servers, like Apache and Nginx
-* [Ant Build Script](https://github.com/h5bp/ant-build-script) — Apache Ant
-  based build script.
+* [Server Configs](https://github.com/h5bp/server-configs) — Fast and
+  smart configurations for web servers such as Apache and Nginx.
+* [Ant Build Script](https://github.com/h5bp/ant-build-script) — Apache
+  Ant based build script.
--- a/dist/doc/css.md
+++ b/dist/doc/css.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # The CSS
@@ -12,8 +12,8 @@ HTML5 Boilerplate's CSS includes:
 * [Print styles](#print-styles)

 This starting CSS does not rely on the presence of
-[conditional class names](http://www.paulirish.com/2008/conditional-stylesheets-vs-css-hacks-answer-neither/),
-[conditional style sheets](http://css-tricks.com/how-to-create-an-ie-only-stylesheet/),
+[conditional class names](https://www.paulirish.com/2008/conditional-stylesheets-vs-css-hacks-answer-neither/),
+[conditional style sheets](https://css-tricks.com/how-to-create-an-ie-only-stylesheet/),
 or [Modernizr](http://modernizr.com/), and it is ready to use no matter what
 your development preferences happen to be.

@@ -106,7 +106,7 @@ HTML5 Boilerplate makes it easy for you to get started with a
 [_mobile first_](http://www.lukew.com/presos/preso.asp?26) and [_responsive web
 design_](http://www.alistapart.com/articles/responsive-web-design/) approach to
 development. But it's worth remembering that there are [no silver
-bullets](http://www.cloudfour.com/css-media-query-for-mobile-is-fools-gold/).
+bullets](http://blog.cloudfour.com/css-media-query-for-mobile-is-fools-gold/).

 We include placeholder media queries to help you build up your mobile styles for
 wider viewports and high-resolution displays. It's recommended that you adapt
@@ -154,7 +154,7 @@ At printing time, these styles will:
    are associated with
  * ensure that
    [orphans and widows](https://en.wikipedia.org/wiki/Widows_and_orphans) do
-    [not appear on printed pages](http://css-tricks.com/almanac/properties/o/orphans/)
+    [not appear on printed pages](https://css-tricks.com/almanac/properties/o/orphans/)

 The print styles are included along with the other `css` to [avoid the
 additional HTTP request](http://www.phpied.com/delay-loading-your-print-css/).
--- a/dist/doc/extend.md
+++ b/dist/doc/extend.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Extend and customise HTML5 Boilerplate
@@ -87,7 +87,7 @@ your site, for example) then you can queue up a domain name to be prefetched.

 ```html
 <link rel="dns-prefetch" href="//example.com">
-<link rel="dns-prefetch" href="//ajax.googleapis.com">
+<link rel="dns-prefetch" href="https://ajax.googleapis.com">
 ```

 You can use as many of these as you need, but it's best if they are all
@@ -107,7 +107,7 @@ Amazon S3:
 Google APIs:

 ```html
-<link rel="dns-prefetch" href="//ajax.googleapis.com">
+<link rel="dns-prefetch" href="https://ajax.googleapis.com">
 ```

 Microsoft Ajax Content Delivery Network:
@@ -230,18 +230,20 @@ $(function(){

 ### Prompt users to switch to "Desktop Mode" in IE10 Metro

-IE10 does not support plugins, such as Flash, in Metro mode. If your site
-requires plugins, you can let users know that via the X-UA-Compatible meta
-element, which will prompt them to switch to Desktop Mode.
+IE10 does not support plugins, such as Flash, in Metro mode. If
+your site requires plugins, you can let users know that via the
+`x-ua-compatible` meta element, which will prompt them to switch
+to Desktop Mode.

 ```html
-<meta http-equiv="X-UA-Compatible" content="requiresActiveX=true">
+<meta http-equiv="x-ua-compatible" content="requiresActiveX=true">
 ```

-Here's what it looks like alongside H5BP's default X-UA-Compatible values:
+Here's what it looks like alongside H5BP's default `x-ua-compatible`
+values:

 ```html
-<meta http-equiv="X-UA-Compatible" content="IE=edge,requiresActiveX=true">
+<meta http-equiv="x-ua-compatible" content="ie=edge,requiresActiveX=true">
 ```

 You can find more information in [Microsoft's IEBlog post about prompting for
@@ -253,7 +255,7 @@ Mode](http://blogs.msdn.com/b/ie/archive/2012/01/31/web-sites-and-a-plug-in-free
 Enabling your application for pinning will allow IE9 users to add it to their
 Windows Taskbar and Start Menu. This comes with a range of new tools that you
 can easily configure with the elements below. See more [documentation on IE9
-Pinned Sites](http://msdn.microsoft.com/en-us/library/gg131029.aspx).
+Pinned Sites](https://msdn.microsoft.com/en-us/library/gg131029.aspx).

 ### Name the Pinned Site for Windows

@@ -337,7 +339,7 @@ even when your app isn't actively running. The badge's value can be a number,
 or one of a predefined list of glyphs.

 * [Tutorial on IEBlog with link to badge XML schema](http://blogs.msdn.com/b/ie/archive/2012/04/03/pinned-sites-in-windows-8.aspx)
-* [Available badge values](http://msdn.microsoft.com/en-us/library/ie/br212849.aspx)
+* [Available badge values](https://msdn.microsoft.com/en-us/library/ie/br212849.aspx)

 ```html
 <meta name="msapplication-badge" value="frequency=NUMBER_IN_MINUTES;polling-uri=http://www.example.com/path/to/file.xml">
@@ -354,8 +356,7 @@ value is boolean rather than a color. It's all or nothing.
 ```

 You can read about this useful element and more techniques in
-[Microsoft's documentation on adapting WebKit-oriented apps for IE10](http://blogs.windows.com/windows_phone/b/wpdev/archive/2012/11/15/adapting-your-webkit-optimized-site-for-internet-explorer-10.aspx).
-
+[Microsoft's documentation on adapting WebKit-oriented apps for IE10](https://blogs.windows.com/buildingapps/2012/11/15/adapting-your-webkit-optimized-site-for-internet-explorer-10/)

 ## Search

@@ -643,3 +644,20 @@ Same applies to the touch icons:
 ```html
 <link rel="icon" sizes="192x192" href="highres-icon.png">
 ```
+
+### Theme Color
+
+You can add the [`theme-color` meta extension](https://github.com/whatwg/meta-theme-color)
+in the `<head>` of your pages to suggest the color that browsers and
+OSes should use if they customize the display of individual pages in
+their UIs with varying colors.
+
+```html
+<meta name="theme-color" content="#ff69b4">
+```
+
+The `content` attribute extension can take any valid CSS color.
+
+Currently, the `theme-color` meta extension is supported by [Chrome 39+
+for Android Lollipop](http://updates.html5rocks.com/2014/11/Support-for-theme-color-in-Chrome-39-for-Android)
+and [Firefox OS 2.1+](https://twitter.com/ahmednefzaoui/status/492344698493997057).
--- a/dist/doc/faq.md
+++ b/dist/doc/faq.md
@@ -1,10 +1,8 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Frequently asked questions

-* [Why is the URL for jQuery without
-  `http`?](#why-is-the-url-for-jquery-without-http)
 * [Why don't you automatically load the latest version of jQuery from the Google
  CDN?](#why-dont-you-automatically-load-the-latest-version-of-jquery-from-the-google-cdn)
 * [Why is the Google Analytics code at the bottom? Google recommends it be
@@ -18,35 +16,6 @@ table of contents](TOC.md)

 --

-### Why is the URL for jQuery without `http`?
-
-It is because of the use of [protocol-relative
-URLs](http://paulirish.com/2010/the-protocol-relative-url/).
-
-**N.B.** If you try to view the local web page directly in the browser, the
-browser will fail to load the assets specified using protocol-relative URLs
-as it will attempt to fetch them from the local file system. We recommend you
-use a local HTTP server to test your web pages, or a file hosting service that
-allows you to preview your web pages online (e.g.
-[Dropbox](https://www.dropbox.com/)).
-
-Setting up a local HTTP server can be done using there various
-[one-liners](https://gist.github.com/willurd/5720255):
-
-* PHP 5.4.0+ by running
-  [`php -S localhost:8080`](https://php.net/manual/en/features.commandline.webserver.php)
-  from your local directory
-* Python 2.x by running `python -m SimpleHTTPServer` from your local directory
-* Python 3.x by running `python -m http.server` from your local directory
-* Ruby 1.9.2+ by running `ruby -run -ehttpd . -p8080` from your local directory
-* Node.js by installing and running either
-  [`static -p 8080`](https://www.npmjs.org/package/node-static)
-  or [`http-server -p 8080`](https://www.npmjs.org/package/http-server)
-
-A list of more complex HTTP servers can be found
-[here](misc.md#servers-and-stacks).
-
-
 ### Why don't you automatically load the latest version of jQuery from the Google CDN?

 The [file](https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.js) to which
@@ -67,12 +36,12 @@ include a URL that will always point to the latest version, as that version:
 The main advantage of placing it in the `<head>` is that you will track the
 user's `pageview` even if they leave the page before it has been fully loaded.
 However, having the code at the bottom of the page [helps improve
-performance](http://stevesouders.com/efws/inline-scripts-bottom.php).
+performance](https://stevesouders.com/efws/inline-scripts-bottom.php).


 ### How can I integrate [Bootstrap](http://getbootstrap.com/) with HTML5 Boilerplate?

-One simple way is to use [Initializr](http://initializr.com) and create a
+One simple way is to use [Initializr](http://www.initializr.com/) and create a
 custom build that includes both HTML5 Boilerplate and
 [Bootstrap](http://getbootstrap.com/).

--- a/dist/doc/html.md
+++ b/dist/doc/html.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # The HTML
@@ -18,7 +18,7 @@ By default, HTML5 Boilerplate provides two `html` pages:
 The `no-js` class is provided in order to allow you to more easily and
 explicitly add custom styles based on whether JavaScript is disabled
 (`.no-js`) or enabled (`.js`). Using this technique also helps [avoid the
-FOUC](http://paulirish.com/2009/avoiding-the-fouc-v3/).
+FOUC](https://www.paulirish.com/2009/avoiding-the-fouc-v3/).


 ## Language attribute
@@ -47,26 +47,26 @@ important because:
     Internet Explorer

 2) the meta tag for compatibility mode
-   (`<meta http-equiv="X-UA-Compatible" content="IE=edge">`):
+   (`<meta http-equiv="x-ua-compatible" content="ie=edge">`):

   * [needs to be included before all other tags except for the `<title>` and
     the other `<meta>`
-     tags](http://msdn.microsoft.com/en-us/library/cc288325.aspx)
+     tags](https://msdn.microsoft.com/en-us/library/cc288325.aspx)


-### `X-UA-Compatible`
+### `x-ua-compatible`

 Internet Explorer 8/9/10 support [document compatibility
-modes](http://msdn.microsoft.com/en-us/library/cc288325.aspx) that affect the
+modes](https://msdn.microsoft.com/en-us/library/cc288325.aspx) that affect the
 way webpages are interpreted and displayed. Because of this, even if your site's
 visitor is using, let's say, Internet Explorer 9, it's possible that IE will not
 use the latest rendering engine, and instead, decide to render your page using
 the Internet Explorer 5.5 rendering engine.

-Specifying the `X-UA-Compatible` meta tag:
+Specifying the `x-ua-compatible` meta tag:

 ```html
-<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta http-equiv="x-ua-compatible" content="ie=edge">
 ```

 or sending the page with the following HTTP response header
@@ -92,7 +92,7 @@ the HTTP header. If you are using a different server, check out our [other
 server config](https://github.com/h5bp/server-configs).

 Starting with Internet Explorer 11, [document modes are
-deprecated](http://msdn.microsoft.com/en-us/library/ie/bg182625.aspx#docmode).
+deprecated](https://msdn.microsoft.com/en-us/library/ie/bg182625.aspx#docmode).
 If your business still relies on older web apps and services that were
 designed for older versions of Internet Explorer, you might want to consider
 enabling [Enterprise Mode](http://blogs.msdn.com/b/ie/archive/2014/04/02/stay-up-to-date-with-enterprise-mode-for-internet-explorer-11.aspx) throughout your company.
@@ -141,12 +141,12 @@ file synchronously loaded at the top of the document.

 If you need to include [polyfills](https://remysharp.com/2010/10/08/what-is-a-polyfill)
 in your project, you must make sure those load before any other JavaScript. If you're
-using some polyfill CDN service, like [cdn.polyfill.io](http://cdn.polyfill.io/),
+using some polyfill CDN service, like [cdn.polyfill.io](https://cdn.polyfill.io/),
 just put it before the other scripts in the bottom of the page:

 ```html
-    <script src="//cdn.polyfill.io/v1/polyfill.min.js"></script>
-    <script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
+    <script src="https://cdn.polyfill.io/v1/polyfill.min.js"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
    <script>window.jQuery || document.write('<script src="js/vendor/jquery-1.11.2.min.js"><\/script>')</script>
    <script src="js/plugins.js"></script>
    <script src="js/main.js"></script>
@@ -192,7 +192,7 @@ odds of having a copy of the library in your user's browser cache.

 While the Google CDN is a strong default solution your site or application may
 require a different configuration. Testing your site with services like
-[WebPageTest](http://www.webpagetest.org/) and browser tools like
+[WebPageTest](https://www.webpagetest.org/) and browser tools like
 [PageSpeed Insights](https://developers.google.com/speed/pagespeed/insights/) or
 [YSlow](https://developer.yahoo.com/yslow/) will help you examine the real
 world performance of your site and can show where you can optimize your specific
--- a/dist/doc/js.md
+++ b/dist/doc/js.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # The JavaScript
@@ -20,7 +20,7 @@ other 3rd party scripts.
 One approach is to put jQuery plugins inside of a `(function($){ ...
 })(jQuery);` closure to make sure they're in the jQuery namespace safety
 blanket. Read more about [jQuery plugin
-authoring](http://docs.jquery.com/Plugins/Authoring#Getting_Started)
+authoring](https://learn.jquery.com/plugins/#Getting_Started).

 By default the `plugins.js` file contains a small script to avoid `console`
 errors in browsers that lack a `console`. The script will make sure that, if
--- a/dist/doc/misc.md
+++ b/dist/doc/misc.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Miscellaneous
@@ -66,29 +66,6 @@ Apache as your web server, then you are encouraged to download a
 [server configuration](https://github.com/h5bp/server-configs) that corresponds
 to your web server and environment.

-
-### Servers and Stacks
-
-A comprehensive list of web servers and stacks are beyond the scope of this
-documentation, but some common ones include:
-
-* [Apache HTTP Server](https://httpd.apache.org/docs/trunk/getting-started.html)
- * [LAMP](https://en.wikipedia.org/wiki/LAMP_%28software_bundle%29)
-(Linux, Apache, MySQL, and PHP).
-Other variants include [MAMP](https://www.mamp.info/en/index.html),
-[WAMP](http://www.wampserver.com/en/),
-or [XAMPP](https://www.apachefriends.org/index.html).
- * LAPP uses PostgreSQL instead of MySQL
-* [Nginx](http://wiki.nginx.org/GettingStarted)
- * [LEMP](http://www.chrisjohnston.org/ubuntu-tutorials/setting-up-a-lemp-stack-ubuntu-904)
-is similar to the LAMP stack but uses Nginx
-* [IIS](https://en.wikipedia.org/wiki/Internet_Information_Services)
- * [ASP.NET](http://www.asp.net/get-started)
-* [MEAN](http://mean.io/) (MongoDB, Express, AngularJS, Node.js)
-
-
-### .htaccess
-
 A `.htaccess` (hypertext access) file is a
 [Apache HTTP server configuration file](https://github.com/h5bp/server-configs-apache).
 The `.htaccess` file is mostly used for:
@@ -182,9 +159,9 @@ For more information about `robots.txt`, please see:

 ## browserconfig.xml

-The `browserconfig.xml` file is used to customize the tile displayed when users 
-pin your site to the Windows 8.1 start screen. In there you can define custom 
-tile colors, custom images or even [live tiles](http://msdn.microsoft.com/en-us/library/ie/dn455106.aspx#CreatingLiveTiles).
+The `browserconfig.xml` file is used to customize the tile displayed when users
+pin your site to the Windows 8.1 start screen. In there you can define custom
+tile colors, custom images or even [live tiles](https://msdn.microsoft.com/en-us/library/ie/dn455106.aspx#CreatingLiveTiles).

 By default, the file points to 2 placeholder tile images:

@@ -195,4 +172,4 @@ By default, the file points to 2 placeholder tile images:
 Notice that IE11 uses the same images when adding a site to the `favorites`.

 For more in-depth information about the `browserconfig.xml` file, please
-see [MSDN](http://msdn.microsoft.com/en-us/library/ie/dn320426%28v=vs.85%29.aspx).
+see [MSDN](https://msdn.microsoft.com/en-us/library/ie/dn320426.aspx).
--- a/dist/doc/usage.md
+++ b/dist/doc/usage.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Usage
@@ -82,8 +82,8 @@ A helpful custom 404 to get you started.

 This file contains all settings regarding custom tiles for IE11.

-For more info on this topic, please refer to 
-[MSDN](http://msdn.microsoft.com/en-us/library/ie/dn455106.aspx).
+For more info on this topic, please refer to
+[MSDN](https://msdn.microsoft.com/en-us/library/ie/dn455106.aspx).

 ### .editorconfig

@@ -119,7 +119,7 @@ crossdomain.xml](misc.md#crossdomainxml).

 ### Icons

-Replace the default `favicon.ico`, `tile.png`, `tile-wide.png` and Apple 
+Replace the default `favicon.ico`, `tile.png`, `tile-wide.png` and Apple
 Touch Icon with your own.

 If you want to use different Apple Touch Icons for different resolutions please
--- a/dist/index.html
+++ b/dist/index.html
@@ -2,7 +2,7 @@
 <html class="no-js" lang="">
    <head>
        <meta charset="utf-8">
-        <meta http-equiv="X-UA-Compatible" content="IE=edge">
+        <meta http-equiv="x-ua-compatible" content="ie=edge">
        <title></title>
        <meta name="description" content="">
        <meta name="viewport" content="width=device-width, initial-scale=1">
@@ -22,8 +22,8 @@
        <!-- Add your site or application content here -->
        <p>Hello world! This is HTML5 Boilerplate.</p>

-        <script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
-        <script>window.jQuery || document.write('<script src="js/vendor/jquery-1.11.2.min.js"><\/script>')</script>
+        <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>
+        <script>window.jQuery || document.write('<script src="js/vendor/jquery-1.11.3.min.js"><\/script>')</script>
        <script src="js/plugins.js"></script>
        <script src="js/main.js"></script>

@@ -32,7 +32,7 @@
            (function(b,o,i,l,e,r){b.GoogleAnalyticsObject=l;b[l]||(b[l]=
            function(){(b[l].q=b[l].q||[]).push(arguments)});b[l].l=+new Date;
            e=o.createElement(i);r=o.getElementsByTagName(i)[0];
-            e.src='//www.google-analytics.com/analytics.js';
+            e.src='https://www.google-analytics.com/analytics.js';
            r.parentNode.insertBefore(e,r)}(window,document,'script','ga'));
            ga('create','UA-XXXXX-X','auto');ga('send','pageview');
        </script>
--- a/dist/js/vendor/jquery-1.11.2.min.js
+++ b/dist/js/vendor/jquery-1.11.2.min.js
--- a/dist/js/vendor/jquery-1.11.3.min.js
+++ b/dist/js/vendor/jquery-1.11.3.min.js
--- a/gulpfile.js
+++ b/gulpfile.js
@@ -2,12 +2,14 @@ var fs = require('fs');
 var path = require('path');

 var gulp = require('gulp');
-var plugins = require('gulp-load-plugins')(); // Load all gulp plugins
-                                              // automatically and attach
-                                              // them to the `plugins` object

-var runSequence = require('run-sequence');    // Temporary solution until gulp 4
-                                              // https://github.com/gulpjs/gulp/issues/355
+// Load all gulp plugins automatically
+// and attach them to the `plugins` object
+var plugins = require('gulp-load-plugins')();
+
+// Temporary solution until gulp 4
+// https://github.com/gulpjs/gulp/issues/355
+var runSequence = require('run-sequence');

 var pkg = require('./package.json');
 var dirs = pkg['h5bp-configs'].directories;
@@ -66,6 +68,7 @@ gulp.task('copy', [
    'copy:.htaccess',
    'copy:index.html',
    'copy:jquery',
+    'copy:license',
    'copy:main.css',
    'copy:misc',
    'copy:normalize'
@@ -89,6 +92,11 @@ gulp.task('copy:jquery', function () {
               .pipe(gulp.dest(dirs.dist + '/js/vendor'));
 });

+gulp.task('copy:license', function () {
+    return gulp.src('LICENSE.txt')
+               .pipe(gulp.dest(dirs.dist));
+});
+
 gulp.task('copy:main.css', function () {

    var banner = '/*! HTML5 Boilerplate v' + pkg.version +
@@ -97,8 +105,11 @@ gulp.task('copy:main.css', function () {

    return gulp.src(dirs.src + '/css/main.css')
               .pipe(plugins.header(banner))
+               .pipe(plugins.autoprefixer({
+                   browsers: ['last 2 versions', 'ie >= 8', '> 1%'],
+                   cascade: false
+               }))
               .pipe(gulp.dest(dirs.dist + '/css'));
-
 });

 gulp.task('copy:misc', function () {
--- a/package.json
+++ b/package.json
@@ -1,20 +1,21 @@
 {
  "devDependencies": {
-    "apache-server-configs": "2.11.0",
-    "archiver": "^0.13.0",
-    "del": "^1.1.0",
-    "glob": "^4.2.1",
-    "gulp": "^3.8.10",
+    "apache-server-configs": "2.14.0",
+    "archiver": "^0.14.3",
+    "del": "^1.1.1",
+    "glob": "^5.0.5",
+    "gulp": "^3.8.11",
+    "gulp-autoprefixer": "^2.1.0",
    "gulp-header": "^1.2.2",
-    "gulp-jscs": "^1.3.1",
-    "gulp-jshint": "^1.9.0",
-    "gulp-load-plugins": "^0.8.0",
+    "gulp-jscs": "^1.5.1",
+    "gulp-jshint": "^1.9.2",
+    "gulp-load-plugins": "^0.10.0",
    "gulp-rename": "^1.2.0",
-    "gulp-replace": "^0.5.0",
-    "jquery": "1.11.2",
-    "jshint-stylish": "^1.0.0",
-    "mocha": "^2.0.1",
-    "normalize.css": "3.0.2",
+    "gulp-replace": "^0.5.3",
+    "jquery": "1.11.3",
+    "jshint-stylish": "^1.0.1",
+    "mocha": "^2.2.4",
+    "normalize.css": "3.0.3",
    "run-sequence": "^1.0.2"
  },
  "engines": {
@@ -28,10 +29,10 @@
      "test": "test"
    }
  },
-  "homepage": "http://h5bp.com/",
+  "homepage": "https://html5boilerplate.com/",
  "license": {
    "type": "MIT",
-    "url": "https://github.com/h5bp/html5-boilerplate/blob/master/LICENSE.md"
+    "url": "https://github.com/h5bp/html5-boilerplate/blob/master/LICENSE.txt"
  },
  "name": "html5-boilerplate",
  "private": true,
@@ -39,5 +40,5 @@
    "build": "gulp build",
    "test": "gulp archive && mocha --reporter spec --timeout 5000"
  },
-  "version": "5.0.0"
+  "version": "5.2.0"
 }
--- a/src/browserconfig.xml
+++ b/src/browserconfig.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<!-- Please read: http://msdn.microsoft.com/en-us/library/ie/dn455106.aspx -->
+<!-- Please read: https://msdn.microsoft.com/en-us/library/ie/dn455106.aspx -->
 <browserconfig>
    <msapplication>
        <tile>
--- a/src/css/main.css
+++ b/src/css/main.css
@@ -22,11 +22,6 @@ html {
 * Customize the background color to match your design.
 */

-::-moz-selection {
-    background: #b3d4fc;
-    text-shadow: none;
-}
-
 ::selection {
    background: #b3d4fc;
    text-shadow: none;
@@ -115,12 +110,10 @@ textarea {

 /*
 * Hide visually and from screen readers:
- * http://juicystudio.com/article/screen-readers-display-none.php
 */

 .hidden {
    display: none !important;
-    visibility: hidden;
 }

 /*
@@ -196,8 +189,7 @@ textarea {
 }

@media print,
-       (-o-min-device-pixel-ratio: 5/4),
-       (-webkit-min-device-pixel-ratio: 1.25),
+       (min-resolution: 1.25dppx),
       (min-resolution: 120dpi) {
    /* Style adjustments for high resolution devices */
 }
--- a/src/doc/TOC.md
+++ b/src/doc/TOC.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com)
+[HTML5 Boilerplate homepage](https://html5boilerplate.com)

 ## Getting started

@@ -23,7 +23,7 @@ The [H5BP organization](https://github.com/h5bp) maintains several projects
 that complement HTML5 Boilerplate, projects that can help you improve different
 aspects of your website/web app (e.g.: the performance, security, etc.).

-* [Server Configs](https://github.com/h5bp/server-configs) — Fast & smart
-  configurations for web servers, like Apache and Nginx
-* [Ant Build Script](https://github.com/h5bp/ant-build-script) — Apache Ant
-  based build script.
+* [Server Configs](https://github.com/h5bp/server-configs) — Fast and
+  smart configurations for web servers such as Apache and Nginx.
+* [Ant Build Script](https://github.com/h5bp/ant-build-script) — Apache
+  Ant based build script.
--- a/src/doc/css.md
+++ b/src/doc/css.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # The CSS
@@ -12,8 +12,8 @@ HTML5 Boilerplate's CSS includes:
 * [Print styles](#print-styles)

 This starting CSS does not rely on the presence of
-[conditional class names](http://www.paulirish.com/2008/conditional-stylesheets-vs-css-hacks-answer-neither/),
-[conditional style sheets](http://css-tricks.com/how-to-create-an-ie-only-stylesheet/),
+[conditional class names](https://www.paulirish.com/2008/conditional-stylesheets-vs-css-hacks-answer-neither/),
+[conditional style sheets](https://css-tricks.com/how-to-create-an-ie-only-stylesheet/),
 or [Modernizr](http://modernizr.com/), and it is ready to use no matter what
 your development preferences happen to be.

@@ -106,7 +106,7 @@ HTML5 Boilerplate makes it easy for you to get started with a
 [_mobile first_](http://www.lukew.com/presos/preso.asp?26) and [_responsive web
 design_](http://www.alistapart.com/articles/responsive-web-design/) approach to
 development. But it's worth remembering that there are [no silver
-bullets](http://www.cloudfour.com/css-media-query-for-mobile-is-fools-gold/).
+bullets](http://blog.cloudfour.com/css-media-query-for-mobile-is-fools-gold/).

 We include placeholder media queries to help you build up your mobile styles for
 wider viewports and high-resolution displays. It's recommended that you adapt
@@ -154,7 +154,7 @@ At printing time, these styles will:
    are associated with
  * ensure that
    [orphans and widows](https://en.wikipedia.org/wiki/Widows_and_orphans) do
-    [not appear on printed pages](http://css-tricks.com/almanac/properties/o/orphans/)
+    [not appear on printed pages](https://css-tricks.com/almanac/properties/o/orphans/)

 The print styles are included along with the other `css` to [avoid the
 additional HTTP request](http://www.phpied.com/delay-loading-your-print-css/).
--- a/src/doc/extend.md
+++ b/src/doc/extend.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Extend and customise HTML5 Boilerplate
@@ -87,7 +87,7 @@ your site, for example) then you can queue up a domain name to be prefetched.

 ```html
 <link rel="dns-prefetch" href="//example.com">
-<link rel="dns-prefetch" href="//ajax.googleapis.com">
+<link rel="dns-prefetch" href="https://ajax.googleapis.com">
 ```

 You can use as many of these as you need, but it's best if they are all
@@ -107,7 +107,7 @@ Amazon S3:
 Google APIs:

 ```html
-<link rel="dns-prefetch" href="//ajax.googleapis.com">
+<link rel="dns-prefetch" href="https://ajax.googleapis.com">
 ```

 Microsoft Ajax Content Delivery Network:
@@ -230,18 +230,20 @@ $(function(){

 ### Prompt users to switch to "Desktop Mode" in IE10 Metro

-IE10 does not support plugins, such as Flash, in Metro mode. If your site
-requires plugins, you can let users know that via the X-UA-Compatible meta
-element, which will prompt them to switch to Desktop Mode.
+IE10 does not support plugins, such as Flash, in Metro mode. If
+your site requires plugins, you can let users know that via the
+`x-ua-compatible` meta element, which will prompt them to switch
+to Desktop Mode.

 ```html
-<meta http-equiv="X-UA-Compatible" content="requiresActiveX=true">
+<meta http-equiv="x-ua-compatible" content="requiresActiveX=true">
 ```

-Here's what it looks like alongside H5BP's default X-UA-Compatible values:
+Here's what it looks like alongside H5BP's default `x-ua-compatible`
+values:

 ```html
-<meta http-equiv="X-UA-Compatible" content="IE=edge,requiresActiveX=true">
+<meta http-equiv="x-ua-compatible" content="ie=edge,requiresActiveX=true">
 ```

 You can find more information in [Microsoft's IEBlog post about prompting for
@@ -253,7 +255,7 @@ Mode](http://blogs.msdn.com/b/ie/archive/2012/01/31/web-sites-and-a-plug-in-free
 Enabling your application for pinning will allow IE9 users to add it to their
 Windows Taskbar and Start Menu. This comes with a range of new tools that you
 can easily configure with the elements below. See more [documentation on IE9
-Pinned Sites](http://msdn.microsoft.com/en-us/library/gg131029.aspx).
+Pinned Sites](https://msdn.microsoft.com/en-us/library/gg131029.aspx).

 ### Name the Pinned Site for Windows

@@ -337,7 +339,7 @@ even when your app isn't actively running. The badge's value can be a number,
 or one of a predefined list of glyphs.

 * [Tutorial on IEBlog with link to badge XML schema](http://blogs.msdn.com/b/ie/archive/2012/04/03/pinned-sites-in-windows-8.aspx)
-* [Available badge values](http://msdn.microsoft.com/en-us/library/ie/br212849.aspx)
+* [Available badge values](https://msdn.microsoft.com/en-us/library/ie/br212849.aspx)

 ```html
 <meta name="msapplication-badge" value="frequency=NUMBER_IN_MINUTES;polling-uri=http://www.example.com/path/to/file.xml">
@@ -354,8 +356,7 @@ value is boolean rather than a color. It's all or nothing.
 ```

 You can read about this useful element and more techniques in
-[Microsoft's documentation on adapting WebKit-oriented apps for IE10](http://blogs.windows.com/windows_phone/b/wpdev/archive/2012/11/15/adapting-your-webkit-optimized-site-for-internet-explorer-10.aspx).
-
+[Microsoft's documentation on adapting WebKit-oriented apps for IE10](https://blogs.windows.com/buildingapps/2012/11/15/adapting-your-webkit-optimized-site-for-internet-explorer-10/)

 ## Search

@@ -643,3 +644,20 @@ Same applies to the touch icons:
 ```html
 <link rel="icon" sizes="192x192" href="highres-icon.png">
 ```
+
+### Theme Color
+
+You can add the [`theme-color` meta extension](https://github.com/whatwg/meta-theme-color)
+in the `<head>` of your pages to suggest the color that browsers and
+OSes should use if they customize the display of individual pages in
+their UIs with varying colors.
+
+```html
+<meta name="theme-color" content="#ff69b4">
+```
+
+The `content` attribute extension can take any valid CSS color.
+
+Currently, the `theme-color` meta extension is supported by [Chrome 39+
+for Android Lollipop](http://updates.html5rocks.com/2014/11/Support-for-theme-color-in-Chrome-39-for-Android)
+and [Firefox OS 2.1+](https://twitter.com/ahmednefzaoui/status/492344698493997057).
--- a/src/doc/faq.md
+++ b/src/doc/faq.md
@@ -1,10 +1,8 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Frequently asked questions

-* [Why is the URL for jQuery without
-  `http`?](#why-is-the-url-for-jquery-without-http)
 * [Why don't you automatically load the latest version of jQuery from the Google
  CDN?](#why-dont-you-automatically-load-the-latest-version-of-jquery-from-the-google-cdn)
 * [Why is the Google Analytics code at the bottom? Google recommends it be
@@ -18,35 +16,6 @@ table of contents](TOC.md)

 --

-### Why is the URL for jQuery without `http`?
-
-It is because of the use of [protocol-relative
-URLs](http://paulirish.com/2010/the-protocol-relative-url/).
-
-**N.B.** If you try to view the local web page directly in the browser, the
-browser will fail to load the assets specified using protocol-relative URLs
-as it will attempt to fetch them from the local file system. We recommend you
-use a local HTTP server to test your web pages, or a file hosting service that
-allows you to preview your web pages online (e.g.
-[Dropbox](https://www.dropbox.com/)).
-
-Setting up a local HTTP server can be done using there various
-[one-liners](https://gist.github.com/willurd/5720255):
-
-* PHP 5.4.0+ by running
-  [`php -S localhost:8080`](https://php.net/manual/en/features.commandline.webserver.php)
-  from your local directory
-* Python 2.x by running `python -m SimpleHTTPServer` from your local directory
-* Python 3.x by running `python -m http.server` from your local directory
-* Ruby 1.9.2+ by running `ruby -run -ehttpd . -p8080` from your local directory
-* Node.js by installing and running either
-  [`static -p 8080`](https://www.npmjs.org/package/node-static)
-  or [`http-server -p 8080`](https://www.npmjs.org/package/http-server)
-
-A list of more complex HTTP servers can be found
-[here](misc.md#servers-and-stacks).
-
-
 ### Why don't you automatically load the latest version of jQuery from the Google CDN?

 The [file](https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.js) to which
@@ -67,12 +36,12 @@ include a URL that will always point to the latest version, as that version:
 The main advantage of placing it in the `<head>` is that you will track the
 user's `pageview` even if they leave the page before it has been fully loaded.
 However, having the code at the bottom of the page [helps improve
-performance](http://stevesouders.com/efws/inline-scripts-bottom.php).
+performance](https://stevesouders.com/efws/inline-scripts-bottom.php).


 ### How can I integrate [Bootstrap](http://getbootstrap.com/) with HTML5 Boilerplate?

-One simple way is to use [Initializr](http://initializr.com) and create a
+One simple way is to use [Initializr](http://www.initializr.com/) and create a
 custom build that includes both HTML5 Boilerplate and
 [Bootstrap](http://getbootstrap.com/).

--- a/src/doc/html.md
+++ b/src/doc/html.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # The HTML
@@ -18,7 +18,7 @@ By default, HTML5 Boilerplate provides two `html` pages:
 The `no-js` class is provided in order to allow you to more easily and
 explicitly add custom styles based on whether JavaScript is disabled
 (`.no-js`) or enabled (`.js`). Using this technique also helps [avoid the
-FOUC](http://paulirish.com/2009/avoiding-the-fouc-v3/).
+FOUC](https://www.paulirish.com/2009/avoiding-the-fouc-v3/).


 ## Language attribute
@@ -47,26 +47,26 @@ important because:
     Internet Explorer

 2) the meta tag for compatibility mode
-   (`<meta http-equiv="X-UA-Compatible" content="IE=edge">`):
+   (`<meta http-equiv="x-ua-compatible" content="ie=edge">`):

   * [needs to be included before all other tags except for the `<title>` and
     the other `<meta>`
-     tags](http://msdn.microsoft.com/en-us/library/cc288325.aspx)
+     tags](https://msdn.microsoft.com/en-us/library/cc288325.aspx)


-### `X-UA-Compatible`
+### `x-ua-compatible`

 Internet Explorer 8/9/10 support [document compatibility
-modes](http://msdn.microsoft.com/en-us/library/cc288325.aspx) that affect the
+modes](https://msdn.microsoft.com/en-us/library/cc288325.aspx) that affect the
 way webpages are interpreted and displayed. Because of this, even if your site's
 visitor is using, let's say, Internet Explorer 9, it's possible that IE will not
 use the latest rendering engine, and instead, decide to render your page using
 the Internet Explorer 5.5 rendering engine.

-Specifying the `X-UA-Compatible` meta tag:
+Specifying the `x-ua-compatible` meta tag:

 ```html
-<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta http-equiv="x-ua-compatible" content="ie=edge">
 ```

 or sending the page with the following HTTP response header
@@ -92,7 +92,7 @@ the HTTP header. If you are using a different server, check out our [other
 server config](https://github.com/h5bp/server-configs).

 Starting with Internet Explorer 11, [document modes are
-deprecated](http://msdn.microsoft.com/en-us/library/ie/bg182625.aspx#docmode).
+deprecated](https://msdn.microsoft.com/en-us/library/ie/bg182625.aspx#docmode).
 If your business still relies on older web apps and services that were
 designed for older versions of Internet Explorer, you might want to consider
 enabling [Enterprise Mode](http://blogs.msdn.com/b/ie/archive/2014/04/02/stay-up-to-date-with-enterprise-mode-for-internet-explorer-11.aspx) throughout your company.
@@ -141,12 +141,12 @@ file synchronously loaded at the top of the document.

 If you need to include [polyfills](https://remysharp.com/2010/10/08/what-is-a-polyfill)
 in your project, you must make sure those load before any other JavaScript. If you're
-using some polyfill CDN service, like [cdn.polyfill.io](http://cdn.polyfill.io/),
+using some polyfill CDN service, like [cdn.polyfill.io](https://cdn.polyfill.io/),
 just put it before the other scripts in the bottom of the page:

 ```html
-    <script src="//cdn.polyfill.io/v1/polyfill.min.js"></script>
-    <script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
+    <script src="https://cdn.polyfill.io/v1/polyfill.min.js"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js"></script>
    <script>window.jQuery || document.write('<script src="js/vendor/jquery-1.11.2.min.js"><\/script>')</script>
    <script src="js/plugins.js"></script>
    <script src="js/main.js"></script>
@@ -192,7 +192,7 @@ odds of having a copy of the library in your user's browser cache.

 While the Google CDN is a strong default solution your site or application may
 require a different configuration. Testing your site with services like
-[WebPageTest](http://www.webpagetest.org/) and browser tools like
+[WebPageTest](https://www.webpagetest.org/) and browser tools like
 [PageSpeed Insights](https://developers.google.com/speed/pagespeed/insights/) or
 [YSlow](https://developer.yahoo.com/yslow/) will help you examine the real
 world performance of your site and can show where you can optimize your specific
--- a/src/doc/js.md
+++ b/src/doc/js.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # The JavaScript
@@ -20,7 +20,7 @@ other 3rd party scripts.
 One approach is to put jQuery plugins inside of a `(function($){ ...
 })(jQuery);` closure to make sure they're in the jQuery namespace safety
 blanket. Read more about [jQuery plugin
-authoring](http://docs.jquery.com/Plugins/Authoring#Getting_Started)
+authoring](https://learn.jquery.com/plugins/#Getting_Started).

 By default the `plugins.js` file contains a small script to avoid `console`
 errors in browsers that lack a `console`. The script will make sure that, if
--- a/src/doc/misc.md
+++ b/src/doc/misc.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Miscellaneous
@@ -66,29 +66,6 @@ Apache as your web server, then you are encouraged to download a
 [server configuration](https://github.com/h5bp/server-configs) that corresponds
 to your web server and environment.

-
-### Servers and Stacks
-
-A comprehensive list of web servers and stacks are beyond the scope of this
-documentation, but some common ones include:
-
-* [Apache HTTP Server](https://httpd.apache.org/docs/trunk/getting-started.html)
- * [LAMP](https://en.wikipedia.org/wiki/LAMP_%28software_bundle%29)
-(Linux, Apache, MySQL, and PHP).
-Other variants include [MAMP](https://www.mamp.info/en/index.html),
-[WAMP](http://www.wampserver.com/en/),
-or [XAMPP](https://www.apachefriends.org/index.html).
- * LAPP uses PostgreSQL instead of MySQL
-* [Nginx](http://wiki.nginx.org/GettingStarted)
- * [LEMP](http://www.chrisjohnston.org/ubuntu-tutorials/setting-up-a-lemp-stack-ubuntu-904)
-is similar to the LAMP stack but uses Nginx
-* [IIS](https://en.wikipedia.org/wiki/Internet_Information_Services)
- * [ASP.NET](http://www.asp.net/get-started)
-* [MEAN](http://mean.io/) (MongoDB, Express, AngularJS, Node.js)
-
-
-### .htaccess
-
 A `.htaccess` (hypertext access) file is a
 [Apache HTTP server configuration file](https://github.com/h5bp/server-configs-apache).
 The `.htaccess` file is mostly used for:
@@ -182,9 +159,9 @@ For more information about `robots.txt`, please see:

 ## browserconfig.xml

-The `browserconfig.xml` file is used to customize the tile displayed when users 
-pin your site to the Windows 8.1 start screen. In there you can define custom 
-tile colors, custom images or even [live tiles](http://msdn.microsoft.com/en-us/library/ie/dn455106.aspx#CreatingLiveTiles).
+The `browserconfig.xml` file is used to customize the tile displayed when users
+pin your site to the Windows 8.1 start screen. In there you can define custom
+tile colors, custom images or even [live tiles](https://msdn.microsoft.com/en-us/library/ie/dn455106.aspx#CreatingLiveTiles).

 By default, the file points to 2 placeholder tile images:

@@ -195,4 +172,4 @@ By default, the file points to 2 placeholder tile images:
 Notice that IE11 uses the same images when adding a site to the `favorites`.

 For more in-depth information about the `browserconfig.xml` file, please
-see [MSDN](http://msdn.microsoft.com/en-us/library/ie/dn320426%28v=vs.85%29.aspx).
+see [MSDN](https://msdn.microsoft.com/en-us/library/ie/dn320426.aspx).
--- a/src/doc/usage.md
+++ b/src/doc/usage.md
@@ -1,4 +1,4 @@
-[HTML5 Boilerplate homepage](http://html5boilerplate.com) | [Documentation
+[HTML5 Boilerplate homepage](https://html5boilerplate.com) | [Documentation
 table of contents](TOC.md)

 # Usage
@@ -82,8 +82,8 @@ A helpful custom 404 to get you started.

 This file contains all settings regarding custom tiles for IE11.

-For more info on this topic, please refer to 
-[MSDN](http://msdn.microsoft.com/en-us/library/ie/dn455106.aspx).
+For more info on this topic, please refer to
+[MSDN](https://msdn.microsoft.com/en-us/library/ie/dn455106.aspx).

 ### .editorconfig

@@ -119,7 +119,7 @@ crossdomain.xml](misc.md#crossdomainxml).

 ### Icons

-Replace the default `favicon.ico`, `tile.png`, `tile-wide.png` and Apple 
+Replace the default `favicon.ico`, `tile.png`, `tile-wide.png` and Apple
 Touch Icon with your own.

 If you want to use different Apple Touch Icons for different resolutions please
--- a/src/index.html
+++ b/src/index.html
@@ -2,7 +2,7 @@
 <html class="no-js" lang="">
    <head>
        <meta charset="utf-8">
-        <meta http-equiv="X-UA-Compatible" content="IE=edge">
+        <meta http-equiv="x-ua-compatible" content="ie=edge">
        <title></title>
        <meta name="description" content="">
        <meta name="viewport" content="width=device-width, initial-scale=1">
@@ -22,7 +22,7 @@
        <!-- Add your site or application content here -->
        <p>Hello world! This is HTML5 Boilerplate.</p>

-        <script src="//ajax.googleapis.com/ajax/libs/jquery/{{JQUERY_VERSION}}/jquery.min.js"></script>
+        <script src="https://ajax.googleapis.com/ajax/libs/jquery/{{JQUERY_VERSION}}/jquery.min.js"></script>
        <script>window.jQuery || document.write('<script src="js/vendor/jquery-{{JQUERY_VERSION}}.min.js"><\/script>')</script>
        <script src="js/plugins.js"></script>
        <script src="js/main.js"></script>
@@ -32,7 +32,7 @@
            (function(b,o,i,l,e,r){b.GoogleAnalyticsObject=l;b[l]||(b[l]=
            function(){(b[l].q=b[l].q||[]).push(arguments)});b[l].l=+new Date;
            e=o.createElement(i);r=o.getElementsByTagName(i)[0];
-            e.src='//www.google-analytics.com/analytics.js';
+            e.src='https://www.google-analytics.com/analytics.js';
            r.parentNode.insertBefore(e,r)}(window,document,'script','ga'));
            ga('create','UA-XXXXX-X','auto');ga('send','pageview');
        </script>
--- a/test/file_existence.js
+++ b/test/file_existence.js
@@ -52,6 +52,7 @@ var expectedFilesInDistDir = [
            'js/vendor/jquery-' + pkg.devDependencies.jquery + '.min.js',
            'js/vendor/modernizr-2.8.3.min.js',

+    'LICENSE.txt',
    'robots.txt',
    'tile-wide.png',
    'tile.png'
Author	SHA1	Message	Date
Cătălin Mariș	85d79ed6cc	v5.2.0	2015-04-30 23:54:24 +03:00
Cătălin Mariș	fee2238978	Update jQuery to `v1.11.3` Fix h5bp/html5-boilerplate#1699	2015-04-30 22:00:30 +03:00
Cătălin Mariș	a91fea4cd6	Update and improve `README.md`	2015-04-16 19:27:57 +03:00
Cătălin Mariș	bf141af507	Docs: Make minor improvements * Fix broken links and use `https://` where possible. * Remove the `Servers and Stacks` section (introduced by h5bp/html5-boilerplate#1572) from the `misc.md` file, as now, since h5bp/html5-boilerplate#1694 was merged, it brings even less value.	2015-04-16 10:31:02 +03:00
H5BP	c0665f0989	Update content from the `dist` directory [skip ci]	2015-04-16 06:32:33 +00:00
Mathias Bynens	dd6ec22ea5	Update `CHANGELOG.md`	2015-04-16 08:31:07 +02:00
Patrick Kettner	2de99b2ba3	Deprecate protocol-relative URLs Always use the HTTPS URL when it’s available. See also: * https://github.com/konklone/cdns-to-https#conclusion-cdns-should-redirect-to-https * http://www.paulirish.com/2010/the-protocol-relative-url/ Close h5bp/html5-boilerplate#1694	2015-04-16 08:30:05 +02:00
Cătălin Mariș	d35a8e9020	Fix broken links in `CONTRIBUTING.md`	2015-04-13 15:59:26 +03:00
Cătălin Mariș	7463646b48	Update `devDependencies`	2015-04-12 22:49:02 +03:00
Hans Christian Reinl	0d9f00826a	Update the high resolution media query Add `dppx` variant of `min-resolution` to the high resolution media query as `dppx` is more accurate¹ than `dpi`. Notes: * since `dppx` is not supported by all browsers the media query still needs the `dpi` fallback * this change removes the `dppx` related warning² from Blink based browsers (e.g.: Chrome, Opera) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ¹ `dpi` (dots per inch) refers to a defined size of pixels where one inch is `96px` no matter what, so it does not take into consideration the physical inches. ² "Consider using 'dppx' units, as in CSS 'dpi' means dots-per-CSS-inch, not dots-per-physical-inch, so does not correspond to the actual 'dpi' of a screen. In media query expression: print, (-webkit-min-device-pixel-ratio: 1.25), (min-resolution: 120dpi)" Fix h5bp/html5-boilerplate#1474 Close h5bp/html5-boilerplate#1691	2015-04-10 14:28:00 +03:00
Cătălin Mariș	6ee34e1ced	Fix errors pointed out by JSCS from `gulpfile.js`	2015-04-10 11:33:56 +03:00
Cătălin Mariș	907838737b	Update Apache Server Configs to `v2.14.0`	2015-04-07 23:53:39 +03:00
Cătălin Mariș	1c93f0a056	v5.1.0	2015-04-01 21:08:35 +03:00
Cătălin Mariș	0c32a937e0	Update `CHANGELOG.md` Remove line regarding the inclusion of the `LICENSE.txt` file in the `dist/` directory as it does not constitute an important change as far as end users are concerned.	2015-04-01 20:54:33 +03:00
Cătălin Mariș	735b9ad706	Update Normalize.css to `v3.0.3`.	2015-03-31 07:05:20 +03:00
Cătălin Mariș	f4d731e23c	Update `devDependencies`	2015-03-25 12:13:57 +02:00
H5BP	9581cf3a81	Update content from the `dist` directory [skip ci]	2015-03-13 20:46:00 +00:00
Matt Smith	c7057bef0c	Use Autoprefixer to add the vendor prefixes Ref h5bp/html5-boilerplate#1682 https://github.com/h5bp/html5-boilerplate/pull/1682#discussion_r26377139 https://github.com/postcss/autoprefixer https://github.com/sindresorhus/gulp-autoprefixer Close h5bp/html5-boilerplate#1682	2015-03-13 22:42:27 +02:00
battaglr	4f6a87f985	README.md: Add detailed info about browser support Close h5bp/html5-boilerplate#1684	2015-03-13 19:10:06 +02:00
Cătălin Mariș	29af44ef9c	Update `CHANGELOG.md`	2015-03-11 17:14:58 +02:00
Cătălin Mariș	eee759bfe1	Use `https://` in the Google Analytics snippet Nowadays HTTPS is fast and increasingly necessary, so using protocol-relative URLs is becoming an anti-pattern, especially for CDNs. From https://developers.google.com/speed/libraries/devguide?csw=1#libraries: " We recommend that you load libraries from the CDN via HTTPS, even if your own website only uses HTTP. Nowadays, performance is fast and caching works just the same " See also: https://github.com/konklone/cdns-to-https#conclusion-cdns-should-redirect-to-https	2015-03-11 17:13:53 +02:00
Cătălin Mariș	57342272e6	Include the `LICENSE` file in the `dist` directory * Rename `LICENSE.md` to `LICENSE.txt` so that more text editors know how to open it. * Make the build step copy the `LICENSE.txt` file in the `dist/` directory so that it gets included in the distribution package. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Ref https://www.youtube.com/watch?v=hWDSToC9EV8&t=15m15s h5bp/html5-boilerplate#1655 Fix h5bp/html5-boilerplate#1655 Close h5bp/html5-boilerplate#1680	2015-03-11 08:17:57 +02:00
Cătălin Mariș	2431333b63	Update `devDependencies`	2015-03-11 08:17:09 +02:00
Cătălin Mariș	422537b96c	Remove `visibility: hidden` from `.hidden` The `visibility: hidden` declaration was added to the `.hidden` class in order to prevent¹ some screen readers from announcing the content: * JAWS: "Announces content in a `span` element hidden with `display: none` if it is in an anchor element. This only works with a `span` element; other inline elements used in an anchor element, such as `em`, `strong`, `abbr`, `code`, and so on, are not announced in JAWS." (from: http://juicystudio.com/article/screen-readers-display-none.php#jawsdisplaynone) * Window-Eyes: "if a container has a value specified for the `background-image` property, content hidden with `display: none` will be announced in Window-Eyes." (from http://juicystudio.com/article/screen-readers-display-none.php#wedisplaynone) Nowadays however, both of those screen reader fixed² their issues, therefore, the `visibility: hidden` declaration is no longer needed. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ¹ http://juicystudio.com/article/screen-readers-display-none.php ² https://github.com/h5bp/html5-boilerplate/issues/1663#issuecomment-77583110 Fix h5bp/html5-boilerplate#1663	2015-03-06 18:02:03 +02:00
Cătălin Mariș	0a40054b7e	Use `https://` where possible	2015-03-05 01:41:23 +02:00
Cătălin Mariș	b07c91dad6	Docs: Update links * Use `https://` for links where possible. * Fix broken links.	2015-03-05 01:41:23 +02:00
Cătălin Mariș	57639ee786	Docs: Lowercase attr values for `X-UA-Compatible` Ref: h5bp/html5-boilerplate#1656	2015-03-05 01:41:23 +02:00
BLooperZ	356e141ec9	Lowercase attr values for x-ua-compatible meta tag Change made in order to be more consistent with the overall use of lowercase in `index.html`. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - From https://msdn.microsoft.com/en-us/library/jj676915.aspx: "The X-UA-Compatible header isn't case sensitive; however, it must appear in the header of the webpage (the HEAD section) before all other elements except for the title element and other meta elements." - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Ref h5bp/html5-boilerplate#1656 Close h5bp/html5-boilerplate#1656 Close h5bp/html5-boilerplate#1668	2015-03-05 01:41:00 +02:00
drKraken	c8165a6da0	Update `devDependencies` Close h5bp/html5-boilerplate#1679	2015-03-04 22:18:38 +02:00
Cătălin Mariș	c0de8e873a	Update Apache Server Configs to v2.13.0	2015-03-04 15:51:05 +02:00
Cătălin Mariș	2a6bb8d219	Update Apache Server Configs to v2.12.0	2015-03-02 23:45:20 +02:00
drKraken	b4bbee5468	Exclude `.htaccess` from GitHub's language stats Ref https://github.com/github/linguist#using-gitattributes Close h5bp/html5-boilerplate#1678	2015-03-02 11:05:19 +02:00
Cătălin Mariș	6443483dd2	Update `.travis.yml` * Redirect all output from `export $(cat .to_export_back)` to `/dev/null` in order to prevent `export` from leaking the access token in the case when, for some odd reason, the `.to_export_back` file is not created. * Regenerate the `secure` key based on a new access token.	2015-02-25 01:09:04 +02:00
Mark Macdonald	192d7fed39	Docs: Add missing period in `js.md` Close #1669	2015-02-10 07:12:58 +01:00
Cătălin Mariș	e7465be638	Update `.travis.yml` * Add `io.js` runtime. https://iojs.org/ * Ensure that the `commit_build_changes.sh` script is only executed if the tests pass in all runtimes.	2015-02-09 12:39:44 +02:00
Cătălin Mariș	3575a69db6	Update `.travis.yml` * Start using Travis CI's container-based infrastructure. http://docs.travis-ci.com/user/workers/container-based-infrastructure/ * Update `Node.js` to `v0.12.0`.	2015-02-08 21:31:24 +02:00
Cătălin Mariș	3be7fe5c01	Update `devDependencies`	2015-02-07 13:41:05 +02:00
Alex Wigmore	78c84ce701	Docs: Add info about <meta name="theme-color"...> Ref: https://github.com/whatwg/meta-theme-color https://bugzilla.mozilla.org/show_bug.cgi?id=1013913 https://twitter.com/ahmednefzaoui/status/492344698493997057 http://updates.html5rocks.com/2014/11/Support-for-theme-color-in-Chrome-39-for-Android Close: h5bp/html5-boilerplate#1642	2015-02-07 13:33:58 +02:00
Cătălin Mariș	ad26878202	CHANGELOG.md: Add date for the `v5.0.0` release	2015-02-07 11:42:42 +02:00