FA-54748 / Accessibility interaction semantics / Member archive

Private document addresses leak into semantic metadata · case 03

Private document addresses leak into semantic metadata.

Member previewVariant 3 · 3 implementations · 6 checks per implementation

Case contract

Input document record title,url,language,mime,loaded,percent,security,private,permissions,revision. Return name (title else URL basename stripping query and fragment), address (None if private), language (replace underscore with hyphen), content_type (lowercase MIME before semicolon), loading (not loaded), progress (100 if loaded otherwise clamp integer percent0..99), secure (security exactly verified), actions (print then copy only when each permission and loaded; copy also forbidden in private), revision. Empty URL fallback is empty name. This policy is deliberately stipulated for a document accessibility bridge.

Why this case matters

Offline accessibility bridge model with explicit policy; useful for testing semantic API adapters independently of browser implementations.

One recorded failure

Sample boundary fixture

This sample comes from the broken implementation of a controlled reproducer.

Boundary fixture	Actual	Expected	Outcome
contract fixture 3	`{"actions": ["print"], "address": "file:///secret", "content_type": "text/plain", "language": "", "loading": false, "name": "Secret", "progress": 100, "revision": 3, "secure": false}`	`{"actions": ["print"], "address": null, "content_type": "text/plain", "language": "", "loading": false, "name": "Secret", "progress": 100, "revision": 3, "secure": false}`	Failed

MEMBER ARCHIVE

The complete case is available to members.

This record includes three runnable implementations, regression fixtures, execution results, and source hashes.

Member access is invitation-based. Sign in with your invited account to inspect the sources.