testaro 74.1.3 → 74.2.1

package/env.example

@@ -28,6 +28,8 @@ REPORTDIR=__placeholder__
 TIMEOUT_MULTIPLIER=1
 # Whether to abort the job when any test act fork crashes (default false).
 ABORT_ASSERTIVELY=false
+# URL of any non-default (e.g., self-hosted) Nu Html Checker API (see ghcr.io/validator/validator).
+TESTARO_NU_URL=__placeholder__
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "testaro",
-  "version": "74.1.3",
+  "version": "74.2.1",
   "description": "Run 1300 web accessibility tests from 10 tools and get a standardized report",
   "main": "index.js",
   "scripts": {

package/run.js

@@ -21,16 +21,15 @@ require('dotenv').config({quiet: true});
 const {isValidJob} = require('./procs/job');
 const {getCatalog} = require('./procs/catalog');
 const {nowString} = require('./procs/dateTime');
-// Module to create browsers.
-const {chromium} = require('playwright-extra');
+const {chromium, webkit, firefox} = require('playwright-extra');
 const fs = require('fs').promises;
 const os = require('os');
-// Module to evade automation detection.
-// Stealth is Chromium-specific: its evasions inject Chromium-only launch
-// flags (e.g. `--disable-blink-features=AutomationControlled`) and patch
-// Blink-only DOM globals. WebKit and Firefox reject the unknown args at
-// startup, so registering stealth on them breaks every launch. Job-level
-// opt-out for Chromium happens in procs/launch.js via the `stealth` field.
+/*
+  Module to evade detection of Chromium automation. Injects launch flags
+  (e.g., `--disable-blink-features=AutomationControlled`) and patches
+  Blink-only DOM globals. Job-level opt-out for Chromium happens in
+  procs/launch.js via the `stealth` field.
+*/
 const StealthPlugin = require('puppeteer-extra-plugin-stealth');
 chromium.use(StealthPlugin());
 

package/tests/nuVal.js

@@ -1,5 +1,6 @@
 /*
   © 2022–2024 CVS Health and/or one of its affiliates. All rights reserved.
+  © 2026 Jeff Witt.
   © 2026 Jonathan Robert Pool.
 
   Licensed under the MIT License. See LICENSE file at the project root or
@@ -12,6 +13,7 @@
   nuVal
   This tool subjects a page and its source to the Nu Html Checker, thereby testing scripted content found only in the loaded page and erroneous content before the browser corrects it. The API erratically replaces left and right double quotation marks with invalid UTF-8, which appears as 2 or 3 successive instances of the replacement character (U+fffd). Therefore, this test removes all such quotation marks and the replacement character. That causes 'Bad value “” for' to become 'Bad value  for'. Since the corruption of quotation marks is erratic, no better solution is known.
   This tool is the API version of the Nu Html Checker. It is an alternative to the nuVnu tool, which uses the same validator as an installed dependency. Each tool has advantages and disadvantages. The main advantage of nuVal is that it does not require the Testaro host to provide a Java virtual machine. The main advantage of the nuVnu tool is that it can evaluate pages reachable from the host that Testaro runs on even if not reachable from the public Internet.
+  This tool calls the W3C validation service unless a TESTARO_NU_URL environment variable is defined with the URL of another instance of the API.
 */
 
 // IMPORTS
@@ -55,7 +57,11 @@ exports.reporter = async (page, report, actIndex) => {
       },
       body: testTarget
     };
-    const nuURL = 'https://validator.w3.org/nu/?parser=html&out=json';
+    // Override target for self-hosted Nu Html Checker instances (Docker
+    // image ghcr.io/validator/validator or equivalent). Defaults to the
+    // public W3C service, which 502s on bodies >~80 kB.
+    const nuURL = process.env.TESTARO_NU_URL
+      || 'https://validator.w3.org/nu/?parser=html&out=json';
     let nuData = {};
     let nuResponse = new Response();
     try {