Skip to content

TINYDOC-3607: Link the Trust Center from the security guide and clarify the Accessibility Checker scope. #4346

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kemister85 merged 1 commit into from
Sep 8, 2026
Merged

TINYDOC-3607: Link the Trust Center from the security guide and clarify the Accessibility Checker scope. #4346

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions modules/ROOT/pages/a11ychecker.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
= Accessibility Checker plugin
:navtitle: Accessibility Checker
:description: Checks the contents of the editor for WCAG & Section 508 accessibility problems.
:description: Checks the content authored in the editor for WCAG and Section 508 accessibility problems.
:keywords: a11y, accessibility, WCAG
:pluginname: Accessibility Checker
:plugincode: a11ychecker
Expand All @@ -9,7 +9,9 @@

include::partial$misc/admon-premium-plugin.adoc[]

The `+a11ychecker+` premium plugin allows you to check the HTML in the editor for various WCAG & Section 508 accessibility problems. It has an auto-repair feature that lets the user fix identified problems.
The `+a11ychecker+` premium plugin allows you to check the HTML authored in the editor for various WCAG and Section 508 accessibility problems. It has an auto-repair feature that lets the user fix identified problems.

NOTE: The {pluginname} plugin evaluates the content authored in the editor. It does not evaluate the accessibility of the {productname} user interface, and the rules it applies are not a statement of conformance for {productname} itself. For information on using the editor with a keyboard or a screen reader, see the xref:tinymce-and-screenreaders.adoc[Accessible navigation guide].

== Interactive example

Expand Down
8 changes: 8 additions & 0 deletions modules/ROOT/pages/security.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@ NOTE: The following is _general_ security advice that may be relevant to a websi
* xref:what-we-do-to-maintain-security-for-tinymce[What we do to maintain security for {productname}]
** xref:scripts-and-xss-vulnerabilities[Scripts and XSS vulnerabilities]
** xref:keeping-dependencies-up-to-date[Keeping dependencies up-to-date]
* xref:security-assurance-and-compliance[Security assurance and compliance]
* xref:enforcing-https-with-hsts[Enforcing HTTPS with HSTS]
* xref:configuring-content-security-policy-csp-for-tinymce[Configuring Content Security Policy (CSP) for {productname}]
* xref:general-security-risks-for-user-input-elements[General security risks for user input elements]
Expand Down Expand Up @@ -62,6 +63,13 @@ From the 1st of January 2020, Security Advisories for patched XSS vulnerabilitie

To protect our users, {companyname} ensures that the {productname} dependencies are updated before the next version (major or minor) is released.

[[security-assurance-and-compliance]]
== Security assurance and compliance

{companyname} publishes its security and compliance posture, including the frameworks it maintains, in the link:https://trust.tiny.cloud/[{companyname} Trust Center].

The Trust Center also holds the supporting documentation, such as audit reports, penetration test reports, and a completed security posture questionnaire. These documents are made available on request through the Trust Center.

[[enforcing-https-with-hsts]]
== Enforcing HTTPS with HSTS

Expand Down
Loading