The altcha.min.js library is not accessibility compliant

Created on 5 June 2025, 1 day ago

Problem/Motivation

After a few tests on the module, I noticed some differences with Altcha, especially on web accessibility points.

The library integrated in the module (/assets/vendor/altcha/altcha.min.js) doesn't seem to correspond to the latest version proposed by Altcha (https://eu.altcha.org/js/latest/altcha.min.js).

The script adds a span instead of integrating the status in a label tag.

Steps to reproduce

Install and activate the module.
Add a captcha "altcha" in a form.
Use a screen reader to test the vocalization of status changes.
Inspect svg tags for the presence of the aria-hidden attribute.

Proposed resolution

Update the library (assets/vendor/altcha), or, override the library in the module configuration with a CDN.

🐛 Bug report

Status

Active

Version

1.0

Component

User interface

Created by

🇫🇷France vanessa.fayard

Live updates comments and jobs are added and updated live.

Accessibility
It affects the ability of people with disabilities or special needs (such as blindness or color-blindness) to use Drupal.

Comments & Activities

Issue created by @vanessa.fayard
Comment 1 day ago →
🇫🇷France vanessa.fayard
Comment about 21 hours ago →
🇧🇪Belgium jeremy.declerck
We do not automatically fetch the latest version of the Altcha library because then we cannot guarantee the stability of the module at all time. That is why we have a fixed stable version by default (currently 1.0.6).

I do agree we should upgrade to the latest stable version (currently 2.0.3) of the Altcha library in the next version.

But to quickly resolve this issue, you can indeed use the CDN setting in the Altcha configuration to set a specific version.

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024