Limit the heading level to 1 - 9.

Source/modules/accessibility/AXNodeObject.cpp

Index: Source/modules/accessibility/AXNodeObject.cpp
diff --git a/Source/modules/accessibility/AXNodeObject.cpp b/Source/modules/accessibility/AXNodeObject.cpp
index 151bb67176eda090b410c3d42c3c3fd1d72b8158..f5efea956d315ad830ac975055f2114d9e0005cf 100644
--- a/Source/modules/accessibility/AXNodeObject.cpp
+++ b/Source/modules/accessibility/AXNodeObject.cpp
@@ -878,7 +878,8 @@ int AXNodeObject::headingLevel() const
     if (!node)
         return 0;
 
-    if (roleValue() == HeadingRole && hasAttribute(aria_levelAttr))
+    if (roleValue() == HeadingRole && hasAttribute(aria_levelAttr)
+        && getAttribute(aria_levelAttr).toInt() <= 9)

[dmazzoni, 2014/12/04 08:26:31]

This still allows 0 and negative numbers. I'd assert that it's >= 1 also.

Might be good to put getAttribute inside a block and only call it once:

    if (roleValue() == HeadingRole && hasAttribute(aria_levelAttr)) {
        int level = getAttribute(aria_levelAttr).toInt();
        if (level >= 1 && level <= 9)
            return level;
    }

         return getAttribute(aria_levelAttr).toInt();
 
     if (!node->isHTMLElement())