Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Prevent error when using <select name="attributes"> #1432

Merged
merged 7 commits into from
Mar 28, 2019

Conversation

straker
Copy link
Contributor

@straker straker commented Mar 13, 2019

Any time we access node.attributes we should check that it returns a NameNodeMap as expected and that the DOM isn't clobbered.

Closes: #1397

Reviewer checks

Required fields, to be filled out by PR reviewer(s)

  • Follows the commit message policy, appropriate for next version
  • Has documentation updated, a DU ticket, or requires no documentation change
  • Includes new tests, or was unnecessary
  • Code is reviewed for security by: @WilcoFiers

@straker straker requested a review from a team as a code owner March 13, 2019 17:37
jeeyyy
jeeyyy previously requested changes Mar 21, 2019
lib/checks/aria/allowed-attr.js Show resolved Hide resolved
lib/checks/aria/allowed-attr.js Show resolved Hide resolved
administratort
administratort previously approved these changes Mar 21, 2019
@administratort
Copy link

我也不知道怎么来评论这个项目!

lib/core/utils/get-node-attributes.js Show resolved Hide resolved
lib/core/utils/get-node-attributes.js Outdated Show resolved Hide resolved
@straker straker dismissed WilcoFiers’s stale review March 28, 2019 15:05

Resolved. We couldn't move to axe.commons.dom since a util function getSelector relies on the function, and core can't access commons functions

@WilcoFiers WilcoFiers changed the title fix: safely get node attributes even when clobbered fix: Prevent error when using <select name="attributes"> Mar 28, 2019
@WilcoFiers WilcoFiers merged commit b477e0d into develop Mar 28, 2019
@WilcoFiers WilcoFiers deleted the getNodeAttributes branch March 28, 2019 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants