fix: template-no-invalid-aria-attributes — accept "undefined" as valid token for aria-orientation

Per aria-query 5.3.2, `aria-orientation` has `type: 'token'` with
`values: ['vertical', 'undefined', 'horizontal']` — i.e. the literal
string "undefined" is an explicit, valid token.

Our previous implementation short-circuited on `value === 'undefined'`
by returning `Boolean(attrDef.allowundefined)` before the token check.
Because `aria-orientation` carries `allowundefined: false` in aria-query,
the valid token "undefined" was incorrectly rejected.

Fix: before applying the generic `allowundefined` shortcut, check
whether the attribute is a `token`/`tokenlist` whose `values` array
explicitly includes `'undefined'`. If so, the value is valid regardless
of `allowundefined`.

Regression tests cover the valid (`undefined`, `horizontal`) and invalid
(`sideways`) cases for `aria-orientation`, in both `<template>` and hbs
parsers.

Reference: audit finding B9 (tests/audit/aria-props/peer-parity.js on
audit/phase3/aria-props); PR #28 backlog item F1.

Author: johanrd

lib/rules/template-no-invalid-aria-attributes.js

@@ -17,6 +17,19 @@ function isValidAriaValue(attrName, value) {
     return true;
   }
 
+  // Check whether 'undefined' is an explicit token in the attribute's value list
+  // (e.g. aria-orientation allows 'undefined' per aria-query) BEFORE applying the
+  // generic allowundefined shortcut. Otherwise valid tokens get rejected for
+  // attributes where allowundefined is false.
+  if (
+    value === 'undefined' &&
+    (attrDef.type === 'token' || attrDef.type === 'tokenlist') &&
+    Array.isArray(attrDef.values) &&
+    attrDef.values.includes('undefined')
+  ) {
+    return true;
+  }
+
   if (value === 'undefined') {
     return Boolean(attrDef.allowundefined);
   }

tests/lib/rules/template-no-invalid-aria-attributes.js

@@ -32,6 +32,8 @@ ruleTester.run('template-no-invalid-aria-attributes', rule, {
     '<template><button type="submit" aria-disabled={{this.isDisabled}}>Submit</button></template>',
     '<template><div role="textbox" aria-sort={{if this.hasCustomSort "other" "ascending"}}></div></template>',
     '<template><div role="combobox" aria-expanded="undefined"></div></template>',
+    '<template><div role="slider" aria-orientation="undefined"></div></template>',
+    '<template><div role="slider" aria-orientation="horizontal"></div></template>',
     '<template><button aria-label={{if @isNew (t "actions.add") (t "actions.edit")}}></button></template>',
   ],
   invalid: [
@@ -121,6 +123,11 @@ ruleTester.run('template-no-invalid-aria-attributes', rule, {
       output: null,
       errors: [{ messageId: 'invalidAriaAttributeValue' }],
     },
+    {
+      code: '<template><div role="slider" aria-orientation="sideways"></div></template>',
+      output: null,
+      errors: [{ messageId: 'invalidAriaAttributeValue' }],
+    },
   ],
 });
 
@@ -150,6 +157,8 @@ hbsRuleTester.run('template-no-invalid-aria-attributes', rule, {
     '<button type="submit" aria-disabled={{this.isDisabled}}>Submit</button>',
     '<div role="textbox" aria-sort={{if this.hasCustomSort "other" "ascending"}}></div>',
     '<div role="combobox" aria-expanded="undefined"></div>',
+    '<div role="slider" aria-orientation="undefined"></div>',
+    '<div role="slider" aria-orientation="horizontal"></div>',
     '<button aria-label={{if @isNew (t "actions.add") (t "actions.edit")}}></button>',
   ],
   invalid: [
@@ -223,5 +232,10 @@ hbsRuleTester.run('template-no-invalid-aria-attributes', rule, {
       output: null,
       errors: [{ messageId: 'invalidAriaAttributeValue' }],
     },
+    {
+      code: '<div role="slider" aria-orientation="sideways"></div>',
+      output: null,
+      errors: [{ messageId: 'invalidAriaAttributeValue' }],
+    },
   ],
 });