Aria disabled does not apply to descendant elements

Source/modules/accessibility/AXNodeObject.cpp

 /*
 * Copyright (C) 2012, Google Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1.  Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 712 matching lines @@
         // Note: we can't call node()->willRespondToMouseClickEvents() because that triggers a style recalc and can delete this.
         if (node()->hasEventListeners(EventTypeNames::mouseup) || node()->hasEventListeners(EventTypeNames::mousedown) || node()->hasEventListeners(EventTypeNames::click) || node()->hasEventListeners(EventTypeNames::DOMActivate))
             return true;
     }
 
     return AXObject::isClickable();
 }
 
 bool AXNodeObject::isEnabled() const
 {
-    if (equalIgnoringCase(getAttribute(aria_disabledAttr), "true"))
+    if (isDescendantOfDisabledNode())
         return false;
 
     Node* node = this->node();
     if (!node || !node->isElementNode())
         return true;
 
     return !toElement(node)->isDisabledFormControl();
 }
 
 AccessibilityExpanded AXNodeObject::isExpanded() const
@@ skipping 1252 matching lines @@
     float range = maxValueForRange() - minValueForRange();
     float value = valueForRange();
 
     value += range * (percentChange / 100);
     setValue(String::number(value));
 
     axObjectCache()->postNotification(node(), AXObjectCacheImpl::AXValueChanged, true);
 }
 
 } // namespace blink