axe-core-api 4.14.0.pre.9ba7f37 → 4.14.0.pre.743b3a1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a4d5c0c478c6c22523ed47912bf8810927ee516d055cd1017ff84540323b7da3
-  data.tar.gz: 6faa06747660ee8247ec713b311dc8a3ea18cc472b7f9e23c69db8e4ca6dee40
+  metadata.gz: a9806ad369e72d353d7c736f92c537a038127e567fd44180f875da9d0f9d63c6
+  data.tar.gz: b6b13dddb4b637ce49e6bc67cff6af19b0f2076a085096c9aa550f58d25ccbf6
 SHA512:
-  metadata.gz: 4eb80c3a671c123c1006e97177733830ddf751448aa4776fe101da0f5fa41a269ab8ce7adbaf1547b92d96eb68e2547327fcecd691515fcfda02f071a49fd9f8
-  data.tar.gz: 030a5a914b24f6334dc5763ac9ce949aa78b16d867e93b882ad9177f84eec12f536bbfc7c210c28cd565716d8f98ff3b830d025523e8fe48a730377144e7cfe3
+  metadata.gz: 4d0dfa7e192f33b96f35f212775b8009afa62199bc726b366c1ace3ee4d6ab134a61573111667d1c52fc2ff79f07816aa15cc5fb1c2fa35b5ca40fe8797af8b2
+  data.tar.gz: eb561fe2e9a3d17a2d7dc35f4f29288b8491d45314dc1366fe446eb0461ac46522a1031d609bbdaf79e7b0e9db878f47a980dd02b5e9d6723a9e0f1a5de97111

data/lib/axe/api/run.rb

@@ -31,6 +31,10 @@ module Axe
         Audit.new to_js, Results.new(results)
       end
 
+      def iframes?
+        JSON.parse(@options.to_json)["iframes"] != false
+      end
+
       def analyze_post_43x(page, lib)
         user_page_load = (get_selenium page).manage.timeouts.page_load
         (get_selenium page).manage.timeouts.page_load = 1
@@ -220,8 +224,9 @@ module Axe
       def get_frame_context_script(page)
         script = <<-JS
           const context = arguments[0];
+          const options = arguments[1];
           try {
-            return window.axe.utils.getFrameContexts(context);
+            return window.axe.utils.getFrameContexts(context, options);
           } catch (err) {
             return {
               violations: [],
@@ -232,7 +237,7 @@ module Axe
             };
           }
         JS
-        page.execute_script_fixed script, @context
+        page.execute_script_fixed script, @context, @options
       end
 
       def get_selenium(page)

data/lib/axe/core.rb

@@ -18,6 +18,7 @@ module Axe
       if use_run_partial
         callable.analyze_post_43x @page, self
       else
+        load_legacy callable
         callable.call @page
       end
     end
@@ -39,12 +40,29 @@ module Axe
     end
 
     def load_axe_core(source)
-      return if already_loaded?
-      loader = Common::Loader.new(@page, self)
-      loader.load_top_level source
-      return if use_run_partial
+      @source = source
+      loaded = already_loaded?
+      @loader = Common::Loader.new(@page, self, loaded_top_level: loaded)
+      return if loaded
 
-      loader.call source
+      begin
+        @loading_frames = true
+        @loader.load_top_level source
+      ensure
+        @loading_frames = false
+      end
+    end
+
+    def load_legacy(callable)
+      return if @frames_loaded || @loading_frames
+
+      iframes = !callable.respond_to?(:iframes?) || callable.iframes?
+      begin
+        @loading_frames = true
+        @frames_loaded = @loader.call @source, iframes: iframes
+      ensure
+        @loading_frames = false
+      end
     end
 
     def already_loaded?

data/lib/loader.rb

@@ -4,27 +4,63 @@ require_relative "./hooks"
 
 module Common
   class Loader
-    def initialize(page, lib)
+    INJECTED = "axeCoreGemsInjected".freeze
+
+    # a frame that blocks scripts skips event listeners and never fires timers, so axe.runPartial would hang in it
+    ASSERT_SCRIPTS_RUN = <<-JS
+      (function () {
+        var ran = false;
+        try {
+          var target = document.createElement('div');
+          target.addEventListener('axe', function () { ran = true; });
+          var event = document.createEvent('Event');
+          event.initEvent('axe', false, false);
+          target.dispatchEvent(event);
+        } catch (e) {
+          return;
+        }
+        if (!ran) {
+          throw new Error('Frame cannot run scripts');
+        }
+      })();
+    JS
+
+    def initialize(page, lib, loaded_top_level: false)
       @page = page
       @lib = lib
-      @loaded_top_level = false
+      @loaded_top_level = loaded_top_level
     end
 
     def load_top_level(source)
-      @page.execute_script source
+      @page.execute_script ASSERT_SCRIPTS_RUN + source
       @loaded_top_level = true
       Common::Hooks.run_after_load @lib
     end
 
-    def call(source, is_top_level = true)
-      @page.execute_script source unless (@loaded_top_level and is_top_level)
-      set_allowed_origins
-      Common::Hooks.run_after_load @lib
-      load_into_iframes(source) unless Axe::Configuration.instance.skip_iframes
+    def call(source, is_top_level = true, iframes: true)
+      if is_top_level || !injected?
+        unless @loaded_top_level and is_top_level
+          @page.execute_script source
+          mark_injected unless is_top_level
+        end
+        set_allowed_origins
+        Common::Hooks.run_after_load @lib
+      end
+      load_frames = iframes && !Axe::Configuration.instance.skip_iframes
+      load_into_iframes(source) if load_frames
+      load_frames
     end
 
     private
 
+    def injected?
+      @page.evaluate_script "window.#{INJECTED} !== undefined && window.#{INJECTED} === window.#{Axe::Core::JS_NAME}"
+    end
+
+    def mark_injected
+      @page.execute_script "window.#{INJECTED} = window.#{Axe::Core::JS_NAME};"
+    end
+
     def set_allowed_origins
       allowed_origins = "<same_origin>"
       allowed_origins = "<unsafe_all_origins>" if !Axe::Configuration.instance.legacy_mode && !Axe::Core::has_run_partial?(@page)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: axe-core-api
 version: !ruby/object:Gem::Version
-  version: 4.14.0.pre.9ba7f37
+  version: 4.14.0.pre.743b3a1
 platform: ruby
 authors:
 - Deque Systems
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-10-06 00:00:00.000000000 Z
+date: 2026-10-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dumb_delegator