dequelabs / dequelabs/axe-core
Bug in DPUB allowed roles alborithm
Open
fix
- Dominant language
- JavaScript
- Stars
- 7.5k
- Forks
- 933
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 17
Description
This line is wrong:
https://github.com/dequelabs/axe-core/blob/5c5ede0c02ab6e0a62a0e13a4ff5d1e27c3db353/lib/commons/aria/get-element-unallowed-roles.js#L78
Didn't look too closely, but getRoleType doesn't return an implicit role. This cannot be correct.
Contributor guide
Assessment
This issue has not been assessed yet.