Find descendants of a DOM node that are in the tab order
Installations
npm install tabbable
Developer
focus-trap
Developer Guide
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
18.16.1
NPM Version
9.5.1
Statistics
534 Stars
1,466 Commits
58 Forks
6 Watching
1 Branches
24 Contributors
Updated on 27 Nov 2024
Bundle Size
5.72 kB
Minified
2.23 kB
Minified + Gzipped
Languages
JavaScript (99.81%)
HTML (0.19%)
Total Downloads
Cumulative downloads
Total Downloads
411,650,090
Last day
0.5%
1,040,607
Compared to previous day
Last week
7.3%
5,452,007
Compared to previous week
Last month
12.2%
21,825,576
Compared to previous month
Last year
105.8%
195,965,755
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
38
tabbable
Small utility that returns an array of all* tabbable DOM nodes within a containing node.
*all has some necessary caveats, which you'll learn about by reading below.
The following are considered tabbable:
<button>
elements<input>
elements<select>
elements<textarea>
elements<a>
elements with anhref
attribute<audio>
and<video>
elements withcontrols
attributes- the first
<summary>
element directly under a<details>
element <details>
element without a<summary>
element- elements with the
[contenteditable]
attribute - anything with a non-negative
tabindex
attribute
Any of the above will not be considered tabbable, though, if any of the following are also true about it:
- has a negative
tabindex
attribute - has a
disabled
attribute - either the node itself or an ancestor of it is hidden via
display: none
(*see "Display check" below to modify this behavior) - has
visibility: hidden
style - is nested under a closed
<details>
element (with the exception of the first<summary>
element) - is an
<input type="radio">
element and a different radio in its group ischecked
- is a form field (button, input, select, textarea) inside a disabled
<fieldset>
- is inert or in an inert container
- ❗️ Only supported in newer browsers that support this new attribute)
- ⚠️ Notably not (yet) supported on Firefox and Safari (Feb 2023)
If you think a node should be included in your array of tabbables but it's not, all you need to do is add tabindex="0"
to deliberately include it. (Or if it is in your array but you don't want it, you can add tabindex="-1"
to deliberately exclude it.) This will also result in more consistent cross-browser behavior. For information about why your special node might not be included, see "More details", below.
Goals
- Accurate (or, as accurate as possible & reasonable)
- No dependencies
- Small
- Fast
Browser Support
As old and as broad as reasonably possible, excluding browsers that are out of support or have nearly no user base.
Focused on desktop browsers, particularly Chrome, Edge, FireFox, Safari, and Opera.
Tabbable is not officially tested on any mobile browsers or devices.
⚠️ Microsoft no longer supports any version of IE, so IE is no longer supported by this library.
💬 Keep in mind that performance optimization and old browser support are often at odds, so tabbable may not always be able to use the most optimal (typically modern) APIs in all cases.
Installation
npm install tabbable
💬 Some very old browsers may need a polyfill for the CSS.escape API for tabbable to work properly with radio buttons that have
name
attributes containing special characters.
API
tabbable
1import { tabbable } from 'tabbable'; 2 3tabbable(container, [options]);
container: Node
(Required)options
:- All the common options.
includeContainer: boolean
(default: false)- If set to
true
,container
will be included in the returned tabbable node array, ifcontainer
is tabbable. - Note that whether this option is true or false, if the
container
is inert, none of its children (deep) will be considered tabbable.
- If set to
Returns an array of ordered tabbable nodes (i.e. in tab order) within the container
.
Summary of ordering principles:
- First include any nodes with positive
tabindex
attributes (1 or higher), ordered by ascendingtabindex
and source order. - Then include any nodes with a zero
tabindex
and any element that by default receives focus (listed above) and does not have a positivetabindex
set, in source order.
isTabbable
1import { isTabbable } from 'tabbable'; 2 3isTabbable(node, [options]);
node: Node
(Required)options
:- All the common options.
Returns a boolean indicating whether the provided node is considered tabbable.
💬 If the node has an inert ancestor, it will not be tabbable.
focusable
1import { focusable } from 'tabbable'; 2 3focusable(container, [options]);
container: Node
: Requiredoptions
:- All the common options.
includeContainer: boolean
(default: false)- If set to
true
,container
will be included in the returned focusable node array, ifcontainer
is focusable. - Note that whether this option is true or false, if the
container
is inert, none of its children (deep) will be considered focusable.
- If set to
Returns an array of focusable nodes within the container
, in DOM order. This will not match the order in which tabbable()
returns nodes.
isFocusable
1import { isFocusable } from 'tabbable'; 2 3isFocusable(node, [options]);
node: Node
(Required)options
:- All the common options.
Returns a boolean indicating whether the provided node is considered focusable.
💬 All tabbable elements are focusable, but not all focusable elements are tabbable. For example, elements with
tabindex="-1"
are focusable but not tabbable. Also note that if the node has aninert ancestor, it will not be focusable.
getTabIndex
1import { getTabIndex } from 'tabbable'; 2 3getTabIndex(node);
node: Element
(Required)
Returns a negative, 0, or positive number that expresses the node's tab index in the DOM, with exceptions made where there are browser inconsistencies related to <audio>
, <video>
, <details>
, and elements with the contenteditable="true"
attribute.
The specific exceptions may change over time. See the implementation for specific behavior.
Common Options
These options apply to all APIs.
displayCheck option
Type: full
| legacy-full
| non-zero-area
| none
. Default: full
.
Configures how to check if an element is displayed.
To reliably check if an element is tabbable/focusable, Tabbable defaults to the most reliable option to keep consistent with browser behavior, however this comes at a cost since every node needs to be validated as displayed using Web APIs that cause layout reflow.
For this reason Tabbable offers the ability of an alternative way to check if an element is displayed (or completely opt out of the check).
The displayCheck
configuration accepts the following options:
full
: (default) Most reliably resembling browser behavior, this option checks that an element is displayed, which requires it to be attached to the DOM, and for all of his ancestors to be displayed (notice this doesn't excludevisibility: hidden
or elements with zero size). This option will cause layout reflow, however. If that is a concern, consider thenone
option.- ⚠️ If the container given to
tabbable()
orfocusable()
, or the node given toisTabbable()
orisFocusable()
, is not attached to the window's maindocument
, the node will be considered hidden and neither tabbable nor focusable. This behavior is new as ofv6.0.0
. - If your code relies on the legacy behavior where detached nodes were considered visible, and you are unable to fix your code to use tabbable once the node is attached, use the
legacy-full
option.
- ⚠️ If the container given to
legacy-full
: Same asfull
but restores the legacy behavior of treating detached nodes as visible. This means that if a node is detached, it's then treated as though the display check was set tonone
(see below for details).- ❗️ Since detached nodes are not treated as tabbable/focusable by browsers, using this option is not recommended as it knowingly diverges from browser behavior.
- ⚠️ This option may be removed in the future. Tabbable will not maintain it at the expense of new features or if having it makes the code disproportionately more complex. It only exists to make the upgrade path to the correct behavior (i.e. the
full
option) as long and smooth as reasonably possible. - The APIs used to determine a node's display are not supported unless its attached (i.e. the browser does not calculate its display unless it is attached). This has effectively been tabbable's behavior for a very long time (up until the
v6.0.0
release), and you may never have encountered an issue if the nodes with which you used tabbable were always displayed anyway (i.e. thenone
mode assumption was coincidentally correct). - You may encounter the above situation if, for example, you render to a node via React, and this node is not attached to the document (or perhaps, due to timing, it is not yet attached at the time you use tabbable's APIs on it).
non-zero-area
: This option checks display under the assumption that elements that are not displayed have zero area (width AND height equals zero). While not keeping true to browser behavior, this option may enhance accessibility, as zero-size elements with focusable content are considered a strong accessibility anti-pattern.- Like the
full
option, this option also causes layout reflow, and should have basically the same performance. Consider thenone
option if reflow is a concern. - ⚠️ As with the
full
option, there is a nuance in behavior depending on whether tabbable APIs are executed on attached vs detached nodes using this mode: Attached nodes that are actually displayed will be deemed visible. Detached nodes, even though displayed will always be deemed hidden because detached nodes always have a zero area as the browser does not calculate is dimensions.
- Like the
none
: This completely opts out of the display check. This option is not recommended, as it might return elements that are not displayed, and as such not tabbable/focusable and can break accessibility. Make sure you know which elements in your DOM are not displayed and can filter them out yourself before using this option.
⚠️ Testing in JSDom (e.g. with Jest): See notes about testing in JSDom.
getShadowRoot option
By default, tabbable overlooks (i.e. does not consider) all elements contained in shadow DOMs (whether open or closed). This has been the behavior since the beginning.
Setting this option to a truthy value enables Shadow DOM support, which means tabbable will consider elements inside web components as candidates, both open (automatically) and closed (provided this function returns the shadow root).
Type: boolean | (node: FocusableElement) => ShadowRoot | boolean | undefined
boolean
:true
simply enables shadow DOM support for any open shadow roots, but never presumes there is an undisclosed shadow. This is the equivalent of settinggetShadowRoot: () => false
false
(default) disables shadow DOM support in so far as calculated tab order and closed shadow roots are concerned. If a child of a shadow (open or closed) is given toisTabbable()
orisFocusable()
, the shadow DOM is still considered for visibility and display checks.
function
:node
will be a descendent of thecontainer
given totabbable()
,isTabbable()
,focusable()
, orisFocusable()
.- Returns: The node's
ShadowRoot
if available,true
indicating aShadowRoot
is attached but not available (i.e. "undisclosed"), or a falsy value indicating there is no shadow attached to the node.
If set to a function, and if it returns
true
, Tabbable assumes a closedShadowRoot
is attached and will treat the node as a scope, iterating its children for additional tabbable/focusable candidates as though it was looking inside the shadow, but not. This will get tabbing order closer to -- but not necessarily the same as -- browser order.Returning
true
from a function will also inform how the node's visibility check is done, causing tabbable to use the non-zero-area Display Check when determining if it's visible, and so tabbable/focusable.
More details
- Tabbable tries to identify elements that are reliably tabbable across (not dead) browsers. Browsers are inconsistent in their behavior, though — especially for edge-case elements like
<object>
and<iframe>
— so this means some elements that you can tab to in some browsers will be left out of the results. (To learn more about this inconsistency, see this amazing table). To provide better consistency across browsers and ensure the elements you want in your tabbables list show up there, try addingtabindex="0"
to edge-case elements that Tabbable ignores. - (Exemplifying the above ^^:) The tabbability of
<iframe>
,<embed>
,<object>
,<summary>
, and<svg>
nodes is inconsistent across browsers, so if you need an accurate read on one of these elements you should try giving it atabindex
. (You'll also need to pay attention to thefocusable
attribute on SVGs in Edge.) But you also might not be able to get an accurate read — so you should avoid relying on it. - Radio groups have some edge cases, which you can avoid by always having a
checked
one in each group (and that is what you should usually do anyway). If there is nochecked
radio in the radio group, all of the radios will be considered tabbable. (Some browsers do this, otherwise don't — there's not consistency.) - If you're thinking, "Why not just use the right
querySelectorAll
?", you may be on to something ... but, as with most "just" statements, you're probably not. For example, a simplequerySelectorAll
approach will not figure out whether an element is hidden, and therefore not actually tabbable. (That said, if you do think Tabbable can be simplified or otherwise improved, I'd love to hear your idea.) - jQuery UI's
:tabbable
selector ignores elements with height and width of0
. I'm not sure why — because I've found that I can still tab to those elements. So I kept them in. Only elements hidden withdisplay: none
orvisibility: hidden
are left out. See "Display check" below for other options. - Although Tabbable tries to deal with positive tabindexes, you should not use positive tabindexes. Accessibility experts seem to be in (rare) unanimous and clear consent about this: rely on the order of elements in the document.
- Safari on Mac OS X does not Tab to
<a>
elements by default: you have to change a setting to get the standard behavior. Tabbable does not know whether you've changed that setting or not, so it will include<a>
elements in its list.
Help
Testing in JSDom
⚠️ JSDom is not officially supported. Your mileage may vary, and tests may break from one release to the next (even a patch or minor release).
This topic is just here to help with what we know may affect your tests.
Tabbable uses some DOM APIs such as Element.getClientRects() in order to determine node visibility, which helps in deciding whether a node is tabbable, focusable, or neither.
When using test engines such as Jest that use JSDom under the hood in order to run tests in Node.js (as opposed to using an automated browser testing tool like Cypress, Playwright, or Nightwatch where a full DOM is available), it is highly recommended (if not essential) to set the displayCheck option to none
when calling any of the APIs in this library that accept it.
Using any other displayCheck
setting will likely lead to failed tests due to nodes expected to be tabbable/focusable being determined to be the opposite because JSDom doesn't fully support some of the DOM APIs being used (even old ones that have been around for a long time).
You can globally overwrite the diplayCheck
property by including this file in your __mocks__
folder:
1// __mocks__/tabbable.js 2 3const lib = jest.requireActual('tabbable'); 4 5const tabbable = { 6 ...lib, 7 tabbable: (node, options) => lib.tabbable(node, { ...options, displayCheck: 'none' }), 8 focusable: (node, options) => lib.focusable(node, { ...options, displayCheck: 'none' }), 9 isFocusable: (node, options) => lib.isFocusable(node, { ...options, displayCheck: 'none' }), 10 isTabbable: (node, options) => lib.isTabbable(node, { ...options, displayCheck: 'none' }), 11}; 12 13module.exports = tabbable;
Contributing
Feedback and contributions more than welcome!
See CONTRIBUTING.
Contributors
In alphabetical order:
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
1 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Reason
dependency not pinned by hash detected -- score normalized to 3
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/focus-trap/tabbable/release.yml/master?enable=pin
- Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 3 third-party GitHubAction dependencies pinned
- Info: 2 out of 2 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
6.3
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to tabbable
@types/tabbable
TypeScript definitions for tabbable
@zag-js/tabbable
Small utility that returns an array of all* tabbable DOM nodes within a containing node.
@accessible/tabbable
A function that returns an array of all tabbable DOM nodes within a containing node.
jquery.tabbable
Simple utility for selecting the next / previous 'tabbable' element. Includes and uses the ':tabbable' and ':focusable' selectors from jQuery UI Core.