govuk_publishing_components 18.1.0 → 18.1.1

data/node_modules/axe-core/doc/projects.md

@@ -0,0 +1,44 @@
+# Projects that use axe-core
+
+Add your project/integration to this file and submit a pull request.
+
+## Deque Projects
+
+1. [WorldSpace Attest](https://www.deque.com/products/worldspace-attest/)
+1. [WorldSpace Assure](https://www.deque.com/products/worldspace-assure/)
+1. [WorldSpace Comply](https://www.deque.com/products/worldspace-comply/)
+1. [aXe Chrome Extension](https://chrome.google.com/webstore/detail/axe/lhdoppojpmngadmnindnejefpokejbdd)
+1. [aXe Firefox Extension](https://addons.mozilla.org/en-US/firefox/addon/axe-devtools/)
+1. [axe-cli](https://www.npmjs.com/package/axe-cli)
+1. [axe-webdriverjs](https://www.npmjs.com/package/axe-webdriverjs)
+1. [grunt-axe-webdriver](https://www.npmjs.com/package/grunt-axe-webdriver)
+1. [react-axe](https://github.com/dequelabs/react-axe)
+1. [axe-matchers (Ruby)](https://github.com/dequelabs/axe-matchers)
+1. [axe-selenium-java](https://github.com/dequelabs/axe-selenium-java)
+
+## Community Projects
+
+1. [Lighthouse](https://github.com/GoogleChrome/lighthouse)
+1. [Webhint.io](https://webhint.io/)
+1. [Web Accessibility Checker for Visual Studio](https://visualstudiogallery.msdn.microsoft.com/3aabefab-1681-4fea-8f95-6a62e2f0f1ec)
+1. [Ace, by DAISY](https://daisy.github.io/ace)
+1. [axe Selenium Python](https://github.com/mozilla-services/axe-selenium-python)
+1. [gulp-axe-webdriver](https://github.com/felixzapata/gulp-axe-webdriver)
+1. [Ghost-Axe](https://www.npmjs.com/package/ghost-axe)
+1. [ember-a11y-testing](https://www.npmjs.com/package/ember-a11y-testing)
+1. [Protractor accessibility plugin](https://github.com/angular/protractor-accessibility-plugin)
+1. [storybook-addon-a11y](https://github.com/storybooks/storybook/tree/master/addons/a11y)
+1. [Intern](https://github.com/theintern/intern-a11y)
+1. [Protractor-axe-report Plugin](https://github.com/E1Edatatracker/protractor-axe-report-plugin)
+1. [Cypress-axe](https://github.com/avanslaars/cypress-axe)
+1. [Jest-axe](https://github.com/nickcolley/jest-axe)
+1. [aXe audit runner for CrawlKit](https://github.com/crawlkit/runner-axe)
+1. [Selenium IDE aXe Extension](https://github.com/bkardell/selenium-ide-axe)
+1. [Axegrinder](https://github.com/claflamme/axegrinder)
+1. [Rocket Validator](https://rocketvalidator.com)
+1. [aXe Reports](https://github.com/louis-reed/axe-reports)
+1. [aXe WebdriverIO](https://github.com/snagi/axe-webdriverio)
+1. [aXe-TestCafe](https://github.com/helen-dikareva/axe-testcafe)
+1. [Web Audit University of Nebraska-Lincoln](https://webaudit.unl.edu/)
+1. [Vorlon.js Remote Debugger](https://github.com/MicrosoftDX/Vorlonjs)
+1. [Terra's Webdriver.io Accessibility Service](https://github.com/cerner/terra-toolkit/blob/master/docs/AxeService.md)

data/node_modules/axe-core/doc/rule-descriptions.md

@@ -0,0 +1,79 @@
+| Rule ID                             | Description                                                                                                                | Impact             | Tags                                                                         | Enabled by default |
+| :---------------------------------- | :------------------------------------------------------------------------------------------------------------------------- | :----------------- | :--------------------------------------------------------------------------- | :----------------- |
+| accesskeys                          | Ensures every accesskey attribute value is unique                                                                          | Serious            | best-practice, cat.keyboard                                                  | true               |
+| area-alt                            | Ensures <area> elements of image maps have alternate text                                                            | Critical           | cat.text-alternatives, wcag2a, wcag111, section508, section508.22.a          | true               |
+| aria-allowed-attr                   | Ensures ARIA attributes are allowed for an element's role                                                             | Critical           | cat.aria, wcag2a, wcag412                                                    | true               |
+| aria-allowed-role                   | Ensures role attribute has an appropriate value for the element                                                            | Minor              | cat.aria, best-practice                                                      | true               |
+| aria-dpub-role-fallback             | Ensures unsupported DPUB roles are only used on elements with implicit fallback roles                                      | Moderate           | cat.aria, wcag2a, wcag131                                                    | true               |
+| aria-hidden-body                    | Ensures aria-hidden='true' is not present on the document body.                                                  | Critical           | cat.aria, wcag2a, wcag412                                                    | true               |
+| aria-hidden-focus                   | Ensures aria-hidden elements do not contain focusable elements                                                             | Serious            | cat.name-role-value, wcag2a, wcag412                                         | true               |
+| aria-required-attr                  | Ensures elements with ARIA roles have all required ARIA attributes                                                         | Critical           | cat.aria, wcag2a, wcag412                                                    | true               |
+| aria-required-children              | Ensures elements with an ARIA role that require child roles contain them                                                   | Critical           | cat.aria, wcag2a, wcag131                                                    | true               |
+| aria-required-parent                | Ensures elements with an ARIA role that require parent roles are contained by them                                         | Critical           | cat.aria, wcag2a, wcag131                                                    | true               |
+| aria-roles                          | Ensures all elements with a role attribute use a valid value                                                               | Serious, Critical  | cat.aria, wcag2a, wcag412                                                    | true               |
+| aria-valid-attr-value               | Ensures all ARIA attributes have valid values                                                                              | Critical           | cat.aria, wcag2a, wcag412                                                    | true               |
+| aria-valid-attr                     | Ensures attributes that begin with aria- are valid ARIA attributes                                                         | Critical           | cat.aria, wcag2a, wcag412                                                    | true               |
+| audio-caption                       | Ensures <audio> elements have captions                                                                               | Critical           | cat.time-and-media, wcag2a, wcag121, section508, section508.22.a             | false              |
+| autocomplete-valid                  | Ensure the autocomplete attribute is correct and suitable for the form field                                               | Serious            | cat.forms, wcag21aa, wcag135                                                 | true               |
+| blink                               | Ensures <blink> elements are not used                                                                                | Serious            | cat.time-and-media, wcag2a, wcag222, section508, section508.22.j             | true               |
+| button-name                         | Ensures buttons have discernible text                                                                                      | Serious, Critical  | cat.name-role-value, wcag2a, wcag412, section508, section508.22.a            | true               |
+| bypass                              | Ensures each page has at least one mechanism for a user to bypass navigation and jump straight to the content              | Serious            | cat.keyboard, wcag2a, wcag241, section508, section508.22.o                   | true               |
+| checkboxgroup                       | Ensures related <input type="checkbox"> elements have a group and that the group designation is consistent | Critical           | cat.forms, best-practice                                                     | true               |
+| color-contrast                      | Ensures the contrast between foreground and background colors meets WCAG 2 AA contrast ratio thresholds                    | Serious            | cat.color, wcag2aa, wcag143                                                  | true               |
+| css-orientation-lock                | Ensures content is not locked to any specific display orientation, and the content is operable in all display orientations | Serious            | cat.structure, wcag134, wcag21aa, experimental                               | true               |
+| definition-list                     | Ensures <dl> elements are structured correctly                                                                       | Serious            | cat.structure, wcag2a, wcag131                                               | true               |
+| dlitem                              | Ensures <dt> and <dd> elements are contained by a <dl>                                                   | Serious            | cat.structure, wcag2a, wcag131                                               | true               |
+| document-title                      | Ensures each HTML document contains a non-empty <title> element                                                      | Serious            | cat.text-alternatives, wcag2a, wcag242                                       | true               |
+| duplicate-id-active                 | Ensures every id attribute value of active elements is unique                                                              | Serious            | cat.parsing, wcag2a, wcag411                                                 | true               |
+| duplicate-id-aria                   | Ensures every id attribute value used in ARIA and in labels is unique                                                      | Critical           | cat.parsing, wcag2a, wcag411                                                 | true               |
+| duplicate-id                        | Ensures every id attribute value is unique                                                                                 | Minor              | cat.parsing, wcag2a, wcag411                                                 | true               |
+| empty-heading                       | Ensures headings have discernible text                                                                                     | Minor              | cat.name-role-value, best-practice                                           | true               |
+| focus-order-semantics               | Ensures elements in the focus order have an appropriate role                                                               | Minor              | cat.keyboard, best-practice, experimental                                    | true               |
+| form-field-multiple-labels          | Ensures form field does not have multiple label elements                                                                   | Moderate           | cat.forms, wcag2a, wcag332                                                   | true               |
+| frame-tested                        | Ensures <iframe> and <frame> elements contain the axe-core script                                              | Critical           | cat.structure, review-item, best-practice                                    | true               |
+| frame-title-unique                  | Ensures <iframe> and <frame> elements contain a unique title attribute                                         | Serious            | cat.text-alternatives, best-practice                                         | true               |
+| frame-title                         | Ensures <iframe> and <frame> elements contain a non-empty title attribute                                      | Serious            | cat.text-alternatives, wcag2a, wcag241, wcag412, section508, section508.22.i | true               |
+| heading-order                       | Ensures the order of headings is semantically correct                                                                      | Moderate           | cat.semantics, best-practice                                                 | true               |
+| hidden-content                      | Informs users about hidden content.                                                                                        | Minor              | cat.structure, experimental, review-item, best-practice                      | true               |
+| html-has-lang                       | Ensures every HTML document has a lang attribute                                                                           | Serious            | cat.language, wcag2a, wcag311                                                | true               |
+| html-lang-valid                     | Ensures the lang attribute of the <html> element has a valid value                                                   | Serious            | cat.language, wcag2a, wcag311                                                | true               |
+| html-xml-lang-mismatch              | Ensure that HTML elements with both valid lang and xml:lang attributes agree on the base language of the page              | Moderate           | cat.language, wcag2a, wcag311                                                | true               |
+| image-alt                           | Ensures <img> elements have alternate text or a role of none or presentation                                         | Critical           | cat.text-alternatives, wcag2a, wcag111, section508, section508.22.a          | true               |
+| image-redundant-alt                 | Ensure button and link text is not repeated as image alternative                                                           | Minor              | cat.text-alternatives, best-practice                                         | true               |
+| input-image-alt                     | Ensures <input type="image"> elements have alternate text                                                  | Critical           | cat.text-alternatives, wcag2a, wcag111, section508, section508.22.a          | true               |
+| label-content-name-mismatch         | Ensures that elements labelled through their content must have their visible text as part of their accessible name         | Serious            | wcag21a, wcag253, experimental                                               | true               |
+| label-title-only                    | Ensures that every form element is not solely labeled using the title or aria-describedby attributes                       | Serious            | cat.forms, best-practice                                                     | true               |
+| label                               | Ensures every form element has a label                                                                                     | Minor, Critical    | cat.forms, wcag2a, wcag332, wcag131, section508, section508.22.n             | true               |
+| landmark-banner-is-top-level        | Ensures the banner landmark is at top level                                                                                | Moderate           | cat.semantics, best-practice                                                 | true               |
+| landmark-complementary-is-top-level | Ensures the complementary landmark or aside is at top level                                                                | Moderate           | cat.semantics, best-practice                                                 | true               |
+| landmark-contentinfo-is-top-level   | Ensures the contentinfo landmark is at top level                                                                           | Moderate           | cat.semantics, best-practice                                                 | true               |
+| landmark-main-is-top-level          | Ensures the main landmark is at top level                                                                                  | Moderate           | cat.semantics, best-practice                                                 | true               |
+| landmark-no-duplicate-banner        | Ensures the document has at most one banner landmark                                                                       | Moderate           | cat.semantics, best-practice                                                 | true               |
+| landmark-no-duplicate-contentinfo   | Ensures the document has at most one contentinfo landmark                                                                  | Moderate           | cat.semantics, best-practice                                                 | true               |
+| landmark-one-main                   | Ensures the document has only one main landmark and each iframe in the page has at most one main landmark                  | Moderate           | cat.semantics, best-practice                                                 | true               |
+| layout-table                        | Ensures presentational <table> elements do not use <th>, <caption> elements or the summary attribute     | Serious            | cat.semantics, wcag2a, wcag131                                               | true               |
+| link-in-text-block                  | Links can be distinguished without relying on color                                                                        | Serious            | cat.color, experimental, wcag2a, wcag141                                     | true               |
+| link-name                           | Ensures links have discernible text                                                                                        | Serious            | cat.name-role-value, wcag2a, wcag412, wcag244, section508, section508.22.a   | true               |
+| list                                | Ensures that lists are structured correctly                                                                                | Serious            | cat.structure, wcag2a, wcag131                                               | true               |
+| listitem                            | Ensures <li> elements are used semantically                                                                          | Serious            | cat.structure, wcag2a, wcag131                                               | true               |
+| marquee                             | Ensures <marquee> elements are not used                                                                              | Serious            | cat.parsing, wcag2a, wcag222                                                 | true               |
+| meta-refresh                        | Ensures <meta http-equiv="refresh"> is not used                                                            | Critical           | cat.time, wcag2a, wcag2aaa, wcag221, wcag224, wcag325                        | true               |
+| meta-viewport-large                 | Ensures <meta name="viewport"> can scale a significant amount                                              | Minor              | cat.sensory-and-visual-cues, best-practice                                   | true               |
+| meta-viewport                       | Ensures <meta name="viewport"> does not disable text scaling and zooming                                   | Critical           | cat.sensory-and-visual-cues, wcag2aa, wcag144                                | true               |
+| object-alt                          | Ensures <object> elements have alternate text                                                                        | Serious            | cat.text-alternatives, wcag2a, wcag111, section508, section508.22.a          | true               |
+| p-as-heading                        | Ensure p elements are not used to style headings                                                                           | Serious            | cat.semantics, wcag2a, wcag131, experimental                                 | true               |
+| page-has-heading-one                | Ensure that the page, or at least one of its frames contains a level-one heading                                           | Moderate           | cat.semantics, best-practice                                                 | true               |
+| radiogroup                          | Ensures related <input type="radio"> elements have a group and that the group designation is consistent    | Critical           | cat.forms, best-practice                                                     | true               |
+| region                              | Ensures all page content is contained by landmarks                                                                         | Moderate           | cat.keyboard, best-practice                                                  | true               |
+| scope-attr-valid                    | Ensures the scope attribute is used correctly on tables                                                                    | Moderate, Critical | cat.tables, best-practice                                                    | true               |
+| server-side-image-map               | Ensures that server-side image maps are not used                                                                           | Minor              | cat.text-alternatives, wcag2a, wcag211, section508, section508.22.f          | true               |
+| skip-link                           | Ensure all skip links have a focusable target                                                                              | Moderate           | cat.keyboard, best-practice                                                  | true               |
+| tabindex                            | Ensures tabindex attribute values are not greater than 0                                                                   | Serious            | cat.keyboard, best-practice                                                  | true               |
+| table-duplicate-name                | Ensure that tables do not have the same summary and caption                                                                | Minor              | cat.tables, best-practice                                                    | true               |
+| table-fake-caption                  | Ensure that tables with a caption use the <caption> element.                                                         | Serious            | cat.tables, experimental, wcag2a, wcag131, section508, section508.22.g       | true               |
+| td-has-header                       | Ensure that each non-empty data cell in a large table has one or more table headers                                        | Critical           | cat.tables, experimental, wcag2a, wcag131, section508, section508.22.g       | true               |
+| td-headers-attr                     | Ensure that each cell in a table using the headers refers to another cell in that table                                    | Serious            | cat.tables, wcag2a, wcag131, section508, section508.22.g                     | true               |
+| th-has-data-cells                   | Ensure that each table header in a data table refers to data cells                                                         | Serious            | cat.tables, wcag2a, wcag131, section508, section508.22.g                     | true               |
+| valid-lang                          | Ensures lang attributes have valid values                                                                                  | Serious            | cat.language, wcag2aa, wcag312                                               | true               |
+| video-caption                       | Ensures <video> elements have captions                                                                               | Critical           | cat.text-alternatives, wcag2a, wcag122, section508, section508.22.a          | true               |
+| video-description                   | Ensures <video> elements have audio descriptions                                                                     | Critical           | cat.text-alternatives, wcag2aa, wcag125, section508, section508.22.b         | true               |

data/node_modules/axe-core/doc/rule-development.md

@@ -0,0 +1,95 @@
+# Developing Axe-core Rules
+
+Before you start writing axe-core rules, be sure to create a proposal for them in a github issue. Read [Proposing Axe-core rules](./rule-proposal.md) for details.
+
+A rule is a JSON Object that defines a test for aXe-core to run. At a high level, think of a rule as doing two things. First it finds all elements that it should test, and after that it runs a number of checks to see if those selected elements pass or fail the rule.
+
+## Rule Select and Matches
+
+Each rule has a 'selector' and optionally a 'matches' property. The selector is a CSS selector. Each element matching this selector will be tested by the rule, unless the matches function says otherwise. The `matches` property is a reference to a function that returns a boolean, which indicates if the element should be tested.
+
+The last thing that may influence if an element is selected for testing in the rule is it's visibility. By default, hidden elements are ignored by the rule, unless the `excludeHidden` is set to 'false'.
+
+## Using Checks in Rules
+
+The actual testing of elements in axe-core is done by checks. A rule has one or more checks which end up generating a result. There are three properties with which to define a rule's checks. Each of them deals differently:
+
+- **All**: Takes an array of check names, **all** of which has to return true for the rule to pass.
+- **none**: Takes an array of check names, **none** of which can to return true for the rule to pass.
+- **any**: Takes an array of check names, **at least one** of which has to return true for the rule to pass.
+
+## Rule Properties
+
+| Prop. Name           | Description                                                         |
+| -------------------- | ------------------------------------------------------------------- |
+| id                   | Unique identifier for the rule                                      |
+| selector             | CSS Selector that matches elements to test                          |
+| matches              | Function to further filter the outcome of the selector              |
+| excludeHidden        | Should hidden elements be excluded                                  |
+| all                  | Checks that must all return true                                    |
+| any                  | Checks of which at least one must return true                       |
+| none                 | Checks that must all return false                                   |
+| pageLevel            | Should the rule only run on the main window                         |
+| enabled              | Does the rule run by default                                        |
+| tags                 | Grouping for the rule, such as wcag2a, best-practice                |
+| metadata.description | Description of what a rule does                                     |
+| metadata.help        | Short description of a violation, used in the aXe extension sidebar |
+
+## Check Properties
+
+| Prop. Name                   | Description                                    |
+| ---------------------------- | ---------------------------------------------- |
+| id                           | Unique identifier for the check                |
+| evaluate                     | Evaluating function, returning a boolean value |
+| options                      | Configurable value for the check               |
+| after                        | Cleanup function, run after check is done      |
+| metadata impact              | "minor", "serious", "critical"                 |
+| metadata.messages.pass       | Describes why the check passed                 |
+| metadata.messages.fail       | Describes why the check failed                 |
+| metadata.messages.incomplete | Describes why the check didn’t complete        |
+
+Incomplete results occur when axe-core can’t produce a clear pass or fail result,
+giving users the opportunity to review it manually. Incomplete messages can take
+the form of a string, or an object with arbitrary keys matching the data returned
+from the check.
+
+A pass message is required, while fail and incomplete are dependent on the check result.
+
+### Incomplete message string
+
+As one example, the audio and video caption checks return an incomplete string:
+
+```js
+messages: {
+  pass: 'Why the check passed',
+  fail: 'Why the check failed',
+  incomplete: 'Why the check returned undefined'
+}
+```
+
+### Incomplete message object with missingData
+
+As another example, the color-contrast check returns missingData to aid in
+remediation. Here’s the message format:
+
+```js
+messages: {
+  pass: 'Why the check passed',
+  fail: 'Why the check failed',
+  incomplete: {
+    bgImage: 'The background color could not be determined due to a background image',
+    default: 'fallback string'
+  }
+}
+```
+
+To wire up an incomplete message with a specific reason it returned undefined,
+the check needs matching data. Otherwise, it will fall back to the `default` message.
+Reasons are arbitrary for the check (such as 'bgImage') but they must match the
+data returned:
+
+```js
+this.data({
+	missingData: 'bgImage'
+});
+```

data/node_modules/axe-core/doc/rule-proposal.md

@@ -0,0 +1,106 @@
+# Proposing Axe-core Rules
+
+This document outlines the process of proposing a rule. For a technical description on how to build a rule, read [Developing Axe-core Rules](./rule-development.md)
+
+Before you start coding a new rule for axe-core, you _must_ create a Github issue to document the rule you want to create. There are many considerations to writing a good rule. It must have no false positives, which is difficult, because there are always many many edge cases to consider. Additionally, a known problem of accessibility testing, is that not all testers hold the same interpretation of the accessibility guidelines. All rules _must_ be consistent with the interpretation of Deque Systems, the developer behind Axe-core.
+
+In addition to giving the axe-core development team an opportunity to provide feedback on the proposed rule, the Github Issue will serve as documentation of that rule for the future.
+
+## WCAG interpretation
+
+Please read our [principles for deciding on rules](./accessibility-supported.md).
+
+## Rules Format
+
+All Github issues that propose a rule must be tagged as _rule_, and must use the following format:
+
+### Intro
+
+In one sentence, describe what the rule does.
+
+Example: "Ensures ARIA attributes are allowed for an element's role"\
+
+#### Rule help
+
+In one sentence, describe how to resolve the issue.
+
+Example: "Elements must only use allowed ARIA attributes"
+
+#### Tags
+
+Indicate which tags the rule should use.
+
+Example: wcag2a, wcag211, cat.keyboard
+
+### Selector
+
+If possible using a CSS selector, otherwise describe in one sentence using plain language what elements the rule selects.
+
+Example 1: `input[type=checkbox][name]`
+
+Example 2: Select each node that has an attribute starting with `aria-`.
+
+### Checks:
+
+Make each check a subheading of `checks`. Give the check name in the heading, and indicate if the check type is `any`, `all` or `none`.
+
+In short sentences, using plain language, describe what conditions will lead to the check returning false, true or undefined. Keep the steps simple and short. You don't have to write out all the logic. Preferably not, just give the high level view of what the check does.
+
+**Example 1:**
+
+`###` aria/allow-attr (any)
+
+1. Look up the element role
+2. Look up a list of aria attributes allowed for that role
+3. Return false if the element has aria attributes not in the list
+4. Otherwise return true
+
+**Example 2:**
+
+`###` keyboard/focusable-no-name (none)
+
+1. If the element is not in the focus order, return false
+2. If the element has an accessible name, return false
+3. Otherwise return true
+
+## Best practices
+
+For rule design, consider the following as best practices:
+
+1. Rules should only have one `none` check so that the error message is specific
+2. Rules should not combine `any` and `none`, these should be broken out into separate rules
+3. Checks should each only test a single specific case (either a passing technique or a single failing test)
+
+## Template
+
+Use this template when creating the issue:
+
+```markdown
+# {{ Rule name }}
+
+{{ Rule description }}
+
+{{ Rule help }}
+
+**Tags:** {{ tag, tag, tag }}
+
+## Selector
+
+{{ selector }}
+
+## Checks
+
+### {{ Check name 1 }} ( any / all / none )
+
+1.
+
+### {{ Check name 2, optional }} ( any / all / none )
+
+1.
+```
+
+## W3C Standardized Rules
+
+Deque Systems is one of leading organizations in the development of standardized accessibility conformance testing rules. The above format is an adaptation of the [Accessibility Conformance Testing Rules Format](https://www.w3.org/TR/act-rules-format/).
+
+For details on how the above format maps to the ACT Rules format, see [act-rules-format.md](./act-rules-format.md).

data/node_modules/axe-core/lib/checks/aria/abstractrole.js

@@ -0,0 +1 @@
+return axe.commons.aria.getRoleType(node.getAttribute('role')) === 'abstract';

data/node_modules/axe-core/lib/checks/aria/abstractrole.json

@@ -0,0 +1,11 @@
+{
+	"id": "abstractrole",
+	"evaluate": "abstractrole.js",
+	"metadata": {
+		"impact": "serious",
+		"messages": {
+			"pass": "Abstract roles are not used",
+			"fail": "Abstract roles cannot be directly used"
+		}
+	}
+}

data/node_modules/axe-core/lib/checks/aria/allowed-attr.js

@@ -0,0 +1,39 @@
+options = options || {};
+
+var invalid = [];
+
+var attr,
+	attrName,
+	allowed,
+	role = node.getAttribute('role'),
+	attrs = node.attributes;
+
+if (!role) {
+	role = axe.commons.aria.implicitRole(node);
+}
+
+allowed = axe.commons.aria.allowedAttr(role);
+
+if (Array.isArray(options[role])) {
+	allowed = axe.utils.uniqueArray(options[role].concat(allowed));
+}
+
+if (role && allowed) {
+	for (var i = 0, l = attrs.length; i < l; i++) {
+		attr = attrs[i];
+		attrName = attr.name;
+		if (
+			axe.commons.aria.validateAttr(attrName) &&
+			!allowed.includes(attrName)
+		) {
+			invalid.push(attrName + '="' + attr.nodeValue + '"');
+		}
+	}
+}
+
+if (invalid.length) {
+	this.data(invalid);
+	return false;
+}
+
+return true;

data/node_modules/axe-core/lib/checks/aria/allowed-attr.json

@@ -0,0 +1,11 @@
+{
+	"id": "aria-allowed-attr",
+	"evaluate": "allowed-attr.js",
+	"metadata": {
+		"impact": "critical",
+		"messages": {
+			"pass": "ARIA attributes are used correctly for the defined role",
+			"fail": "ARIA attribute{{=it.data && it.data.length > 1 ? 's are' : ' is'}} not allowed:{{~it.data:value}} {{=value}}{{~}}"
+		}
+	}
+}

data/node_modules/axe-core/lib/checks/aria/aria-allowed-role.js

@@ -0,0 +1,28 @@
+/**
+ * Implements allowed roles defined at:
+ * https://www.w3.org/TR/html-aria/#docconformance
+ * https://www.w3.org/TR/SVG2/struct.html#implicit-aria-semantics
+ */
+const { dom } = axe.commons;
+const { allowImplicit = true, ignoredTags = [] } = options || {};
+const tagName = node.nodeName.toUpperCase();
+
+// check if the element should be ignored, by an user setting
+if (ignoredTags.map(t => t.toUpperCase()).includes(tagName)) {
+	return true;
+}
+
+const unallowedRoles = axe.commons.aria.getElementUnallowedRoles(
+	node,
+	allowImplicit
+);
+
+if (unallowedRoles.length) {
+	this.data(unallowedRoles);
+	if (!dom.isVisible(node, true)) {
+		// flag hidden elements for review
+		return undefined;
+	}
+	return false;
+}
+return true;

data/node_modules/axe-core/lib/checks/aria/aria-allowed-role.json

@@ -0,0 +1,16 @@
+{
+	"id": "aria-allowed-role",
+	"evaluate": "aria-allowed-role.js",
+	"options": {
+		"allowImplicit": true,
+		"ignoredTags": []
+	},
+	"metadata": {
+		"impact": "minor",
+		"messages": {
+			"pass": "ARIA role is allowed for given element",
+			"fail": "ARIA role{{=it.data && it.data.length > 1 ? 's' : ''}} {{=it.data.join(', ')}} {{=it.data && it.data.length > 1 ? 'are' : ' is'}} not allowed for given element",
+			"incomplete": "ARIA role{{=it.data && it.data.length > 1 ? 's' : ''}} {{=it.data.join(', ')}} must be removed when the element is made visible, as {{=it.data && it.data.length > 1 ? 'they are' : 'it is'}} not allowed for the element"
+		}
+	}
+}