[Webkit-unassigned] [Bug 201952] New: AX: VO can still access content that's inside a visibility:hidden iframe

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=201952

            Bug ID: 201952
           Summary: AX: VO can still access content that's inside a
                    visibility:hidden iframe
           Product: WebKit
           Version: Safari 12
          Hardware: Macintosh
                OS: macOS 10.14
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: diane.ko at airbnb.com
                CC: webkit-bug-importer at group.apple.com

Created attachment 379083

  --> https://bugs.webkit.org/attachment.cgi?id=379083&action=review

Screencast of using VO to navigate to hidden iframe elements

iframe content that is hidden with visibility:hidden, and is meant to be hidden for all users, including AT users, can still be accessed with VoiceOver.

Steps to reproduce:
1. Turn on VoiceOver and open Safari
2. Access a page that has an iframe that either has visibility:hidden applied directly, or to its parent node (eg: https://codepen.io/backwardok/pen/YzKJOgM)
3. Navigate using VoiceOver to the content before the frame and then navigate forward

What's expected:
VoiceOver skips over the hidden frame and navigates to the next piece of content.

What happens:
VoiceOver accesses the frame, as well as allows a user to navigate inside the frame.

I was also able to reproduce this on an iPhone with VO and Safari.

When using VO on macOS with Firefox or Chrome, the frames are properly ignored. I also validated that using NVDA with Firefox also properly ignores the hidden iframe. TalkBack with Chrome also properly ignores the hidden iframe.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190918/e3ab5ef6/attachment.html>