dequelabs / dequelabs/axe-core
axe not compatible with Content-Security-Policy (CSP)
Open
extension
performance
- Dominant language
- JavaScript
- Stars
- 7.5k
- Forks
- 933
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 17
Description
Product: axe-core
Expectation: Should work with website CSP
Actual: Violates CSP which causes problems rendering the page and with third party tools such as Chrome DevTools Lighthouse.
Motivation: Cannot have axe and use CSP
axe-core version: 4.18.2
- Platform: Linux
- Browser: Chrome 96
Please use the test site https://ettyproject.org/ for demonstration of issue.
Contributor guide
Assessment
This issue has not been assessed yet.