axe-core 3.5.5 → 3.5.6

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [3.5.6](https://github.com/dequelabs/axe-core/compare/v3.5.5...v3.5.6) (2021-05-12)
+
+### Bug Fixes
+
+- add noHtml to axe.configure ([8982c1a](https://github.com/dequelabs/axe-core/commit/8982c1a44cd2330da5be783f74a65fca121d96cb))
+- do not allow postMessage with axe version of x.y.z ([fde6ab2](https://github.com/dequelabs/axe-core/commit/fde6ab2ab247ea1e8138829534fde630bb342ed2))
+
 ### [3.5.5](https://github.com/dequelabs/axe-core/compare/v3.5.4...v3.5.5) (2020-06-16)
 
 ### Bug Fixes
@@ -129,6 +136,13 @@ All notable changes to this project will be documented in this file. See [standa
 - **typings:** add proper return value to getRule ([#1900](https://github.com/dequelabs/axe-core/issues/1900)) ([4d907f8](https://github.com/dequelabs/axe-core/commit/4d907f86b0152122f92cceae0b242e09aff0f49a))
 - **unicode:** stop parsing escaped unicode strings ([#1997](https://github.com/dequelabs/axe-core/issues/1997)) ([7447d03](https://github.com/dequelabs/axe-core/commit/7447d03bcfd118897d8114fded1ea8a42f3da08f))
 
+### [3.4.3](https://github.com/dequelabs/axe-core/compare/v3.4.2...v3.4.3) (2021-05-12)
+
+### Bug Fixes
+
+- add noHtml to axe.configure ([eec4282](https://github.com/dequelabs/axe-core/commit/eec42827c971ca60b3363d45d427ebd969fe0156))
+- do not allow postMessage with axe version of x.y.z ([b317100](https://github.com/dequelabs/axe-core/commit/b3171004a6a427a74d65aee3d311315691b635cc))
+
 ## [3.4.2](https://github.com/dequelabs/axe-core/compare/v3.4.1...v3.4.2) (2020-02-04)
 
 ### Bug Fixes
@@ -200,6 +214,13 @@ All notable changes to this project will be documented in this file. See [standa
 - **runVirtualNode:** Allow serialised nodes [experimental](<[512d51b](https://github.com/dequelabs/axe-core/commit/512d51b)>)
 - **video-description:** deprecate video-description rule ([#1737](https://github.com/dequelabs/axe-core/issues/1737)) ([e91c25f](https://github.com/dequelabs/axe-core/commit/e91c25f))
 
+### [3.3.4](https://github.com/dequelabs/axe-core/compare/v3.3.3...v3.3.4) (2021-05-11)
+
+### Bug Fixes
+
+- add noHtml to axe.configure ([ec5a4d7](https://github.com/dequelabs/axe-core/commit/ec5a4d783ad8a417df65dc1e5e4781efdeddbfa8))
+- do not allow postMessage with axe version of x.y.z ([7ccd858](https://github.com/dequelabs/axe-core/commit/7ccd858fb2b58b29a955f8174298f94f87f71d26))
+
 ## [3.3.3](https://github.com/dequelabs/axe-core/compare/v3.3.2...v3.3.3) (2020-02-04)
 
 ### Bug Fixes
@@ -307,6 +328,13 @@ All notable changes to this project will be documented in this file. See [standa
 - only run IE11 tests in appveyor ([#1571](https://github.com/dequelabs/axe-core/issues/1571)) ([35261ef](https://github.com/dequelabs/axe-core/commit/35261ef))
 - watch integration html and json files ([#1598](https://github.com/dequelabs/axe-core/issues/1598)) ([3de0b05](https://github.com/dequelabs/axe-core/commit/3de0b05))
 
+## [3.2.4](https://github.com/dequelabs/axe-core/compare/v3.2.3...v3.2.4) (2021-05-10)
+
+### Bug Fixes
+
+- add noHtml to axe.configure ([e994323](https://github.com/dequelabs/axe-core/commit/e99432311dfd45d20c8bafe823f7f8eb61065cb0))
+- do not allow postMessage with axe version of x.y.z ([a05264f](https://github.com/dequelabs/axe-core/commit/a05264f0d1615e0434d5dd1efa4fca5ef76f7021))
+
 ## [3.2.3](https://github.com/dequelabs/axe-core/compare/v3.2.2...v3.2.3) (2020-02-04)
 
 ### Bug Fixes
@@ -389,6 +417,15 @@ All notable changes to this project will be documented in this file. See [standa
 
 - Deprecate axe.commons.utils namespace ([#1330](https://github.com/dequelabs/axe-core/issues/1330)) ([df93272](https://github.com/dequelabs/axe-core/commit/df93272))
 
+<a name="3.1.3"></a>
+
+## [3.1.3](https://github.com/dequelabs/axe-core/compare/v3.1.2...v3.1.3) (2021-05-05)
+
+### Bug Fixes
+
+- add noHtml to axe.configure ([dee205b](https://github.com/dequelabs/axe-core/commit/dee205b))
+- do not allow postMessage with axe version of x.y.z ([e93f394](https://github.com/dequelabs/axe-core/commit/e93f394))
+
 <a name="3.1.2"></a>
 
 ## [3.1.2](https://github.com/dequelabs/axe-core/compare/v3.0.3...v3.1.2) (2018-09-07)
@@ -459,6 +496,13 @@ All notable changes to this project will be documented in this file. See [standa
 - **i18n:** Update ja (Japanese) locale for 3.1 release ([#1101](https://github.com/dequelabs/axe-core/issues/1101)) ([ef6cd86](https://github.com/dequelabs/axe-core/commit/ef6cd86))
 - **deprecate:** Deprecate audio-caption rule ([#1071](https://github.com/dequelabs/axe-core/issues/1071)) ([3b05fee](https://github.com/dequelabs/axe-core/commit/3b05fee))
 
+## [3.0.4](https://github.com/dequelabs/axe-core/compare/v3.0.3...v3.0.4) (2021-04-30)
+
+### Bug Fixes
+
+- add noHtml to axe.configure ([2e18f0c](https://github.com/dequelabs/axe-core/commit/2e18f0c))
+- do not allow postMessage with axe version of x.y.z ([9e62c8c](https://github.com/dequelabs/axe-core/commit/9e62c8c))
+
 <a name="3.0.3"></a>
 
 ## [3.0.3](https://github.com/dequelabs/axe-core/compare/v3.0.2...v3.0.3) (2018-06-04)

package/axe.d.ts

@@ -125,6 +125,7 @@ declare namespace axe {
 		rules?: Rule[];
 		locale?: Locale;
 		axeVersion?: string;
+		noHtml?: boolean;
 	}
 	interface Check {
 		id: string;

package/axe.js

@@ -1,5 +1,5 @@
-/*! axe v3.5.5
- * Copyright (c) 2020 Deque Systems, Inc.
+/*! axe v3.5.6
+ * Copyright (c) 2021 Deque Systems, Inc.
  *
  * Your use of this Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
@@ -27,7 +27,7 @@
     return _typeof(obj);
   }
   var axe = axe || {};
-  axe.version = '3.5.5';
+  axe.version = '3.5.6';
   if (typeof define === 'function' && define.amd) {
     define('axe-core', [], function() {
       'use strict';
@@ -8346,6 +8346,7 @@
       config = {};
     }
     config.reporter = config.reporter || null;
+    config.noHtml = config.noHtml || false;
     config.rules = config.rules || [];
     config.checks = config.checks || [];
     config.data = _extends({
@@ -8521,6 +8522,7 @@
     this.commands = {};
     this.rules = [];
     this.checks = {};
+    this.noHtml = audit.noHtml;
     unpackToObject(audit.rules, this, 'addRule');
     unpackToObject(audit.checks, this, 'addCheck');
     this.data = {};
@@ -10017,6 +10019,9 @@
     if (spec.locale) {
       audit.applyLocale(spec.locale);
     }
+    if (spec.noHtml) {
+      audit.noHtml = true;
+    }
   }
   axe.configure = configureChecksRulesAndBranding;
   'use strict';
@@ -11077,7 +11082,13 @@
         toRoot: true
       };
     }
-    this.source = this.spec.source !== undefined ? this.spec.source : getSource(element);
+    if (axe._audit && axe._audit.noHtml) {
+      this.source = null;
+    } else if (this.spec.source !== undefined) {
+      this.source = this.spec.source;
+    } else {
+      this.source = getSource(element);
+    }
     this._element = element;
   }
   DqElement.prototype = {
@@ -13164,7 +13175,7 @@
     function verify(postedMessage) {
       if (_typeof(postedMessage) === 'object' && typeof postedMessage.uuid === 'string' && postedMessage._respondable === true) {
         var messageSource = _getSource();
-        return postedMessage._source === messageSource || postedMessage._source === 'axeAPI.x.y.z' || messageSource === 'axeAPI.x.y.z';
+        return postedMessage._source === messageSource;
       }
       return false;
     }
@@ -13218,7 +13229,7 @@
     function publish(source, data, keepalive) {
       var topic = data.topic;
       var subscriber = subscribers[topic];
-      if (subscriber) {
+      if (subscriber && source === window.parent) {
         var responder = createResponder(source, null, data.uuid);
         subscriber(data.message, keepalive, responder);
       }