7121 2009-07-17 12:25:49 +0000 Determine if there are security issues around outer documents overriding behavior inside frames 2010-07-01 19:34:43 +0000 1 1 1 Unclassified ARIA Core AAM 1.0 PC Windows XP RESOLVED FIXED P1 normal --- 1 andi.snowweaver andi.snowweaver aria-ua-impl oldest_to_newest 26006 0 andi.snowweaver 2009-07-17 12:25:49 +0000 26007 1 andi.snowweaver 2009-07-17 12:27:30 +0000 5.1: numbered bullets after "computing other properties for an inner document" #1 - another case that seems a little odd - outer document controlling behavior of inner document 26247 2 andi.snowweaver 2009-08-05 18:31:53 +0000 Note that section 5.1, bullet #1 referred to in the previous comment is this one: # For user-controlled properties (aria-selected, aria-valuenow, aria-valuetext, aria-activedescendant), use the WAI-ARIA markup on the root WAI-ARIA node only 35169 3 cyns 2010-04-20 20:23:20 +0000 Security issues would only come in if javascript from the parent had access to the accname that was built from the <title> of the child. It doesn't. We should probably add a note to this section along the lines of: NOTE: If the child frame is in a different domain than the parent, do not expose the name to javascript in the parent.