Closed mgifford closed 6 years ago
For security reasons QuailJS should be replaced with an actively maintained library like axe-core or pa11y.
This is an outstanding issue in the Drupal community: https://www.drupal.org/project/ckeditor_a11ychecker/issues/2958494
If a JavaScript security person can explain why this isn't a concern, great. I just know in principle that unmaintained code should never be sitting on a production environment.
Thanks @mgifford, this issue is already tracked in #242. Make sure to add 👍 reaction to support the issue.
pa11y is really just a wrapper around HTML CodeSniffer.
For security reasons QuailJS should be replaced with an actively maintained library like axe-core or pa11y.
This is an outstanding issue in the Drupal community: https://www.drupal.org/project/ckeditor_a11ychecker/issues/2958494
If a JavaScript security person can explain why this isn't a concern, great. I just know in principle that unmaintained code should never be sitting on a production environment.