From 703bf15f9d7ee3fee4861da46b1f5ba03b00287e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johan=20R=C3=B8ed?= <johanroed@gmail.com>
Date: Fri, 24 Apr 2026 21:11:24 +0200
Subject: [PATCH 1/3] fix: ignore comment + whitespace nodes in
 template-no-yield-only
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The rule flagged yield-only templates by asserting
`templateNodes.length === 1 && isYieldOnly(templateNodes[0])`. That
works only while the parser strips template comments out of the body,
which ember-estree 0.4.2 happened to do. Upstream ember-estree 0.4.3
(#31) began keeping MustacheCommentStatement nodes in the body, so a
template like

    <template>{{! some comment }}{{yield}}</template>

now yields a body of length 2 and silently stops being flagged — which
is also why PR #2735 (upgrade to ember-eslint-parser 0.11) fails this
rule's CI.

Ignoring comment and whitespace-only text nodes before the length check
aligns with:

- upstream ember-template-lint's `no-yield-only.js` (unchanged there
  since comments-in-body is the native Glimmer AST shape anyway)
- the sibling rule `template-no-bare-yield.js`, which already uses the
  same `isEmptyNode` filter

The fix is a no-op on the currently-pinned ember-eslint-parser@0.10 and
fixes the rule under any parser version that preserves comment nodes in
the template body. The rule also now correctly catches yield-only
templates that contain HTML comments (`<!-- x -->{{yield}}`), which it
was silently missing before.
---
 lib/rules/template-no-yield-only.js       | 11 ++++++++++-
 tests/lib/rules/template-no-yield-only.js | 10 ++++++++++
 2 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/lib/rules/template-no-yield-only.js b/lib/rules/template-no-yield-only.js
index 76d859be8d..b4b423b662 100644
--- a/lib/rules/template-no-yield-only.js
+++ b/lib/rules/template-no-yield-only.js
@@ -1,3 +1,11 @@
+function isEmptyNode(node) {
+  return (
+    node.type === 'GlimmerMustacheCommentStatement' ||
+    node.type === 'GlimmerCommentStatement' ||
+    (node.type === 'GlimmerTextNode' && !node.chars.trim())
+  );
+}
+
 function isYieldOnly(node) {
   return (
     node.type === 'GlimmerMustacheStatement' &&
@@ -44,7 +52,8 @@ module.exports = {
             ? node.body[0].children
             : node.body;
 
-        if (templateNodes.length === 1 && isYieldOnly(templateNodes[0])) {
+        const nonEmptyNodes = templateNodes.filter((n) => !isEmptyNode(n));
+        if (nonEmptyNodes.length === 1 && isYieldOnly(nonEmptyNodes[0])) {
           isOnlyYield = true;
         }
       },
diff --git a/tests/lib/rules/template-no-yield-only.js b/tests/lib/rules/template-no-yield-only.js
index 9129c00828..cfb3fc9797 100644
--- a/tests/lib/rules/template-no-yield-only.js
+++ b/tests/lib/rules/template-no-yield-only.js
@@ -30,6 +30,16 @@ const invalidHbs = [
     output: null,
     errors: [{ messageId: 'noYieldOnly' }],
   },
+  {
+    code: '{{!-- long-form comment --}}{{yield}}',
+    output: null,
+    errors: [{ messageId: 'noYieldOnly' }],
+  },
+  {
+    code: '<!-- html comment -->{{yield}}',
+    output: null,
+    errors: [{ messageId: 'noYieldOnly' }],
+  },
 ];
 
 function wrapTemplate(entry) {

From 19e44c40ec3026d1817e39167b240b537540ad2e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johan=20R=C3=B8ed?= <johanroed@gmail.com>
Date: Sat, 25 Apr 2026 08:15:28 +0200
Subject: [PATCH 2/3] =?UTF-8?q?BUGFIX:=20template-require-iframe-title=20?=
 =?UTF-8?q?=E2=80=94=20flag=20invalid=20title=20literals=20+=20add=20allow?=
 =?UTF-8?q?WhitespaceOnlyTitle=20opt-out?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Treat literal AST values that don't produce a meaningful accessible name
as invalid `<iframe title>` values:

- `GlimmerBooleanLiteral` / `GlimmerNullLiteral` / `GlimmerUndefinedLiteral` /
  `GlimmerNumberLiteral` → flagged with a new `invalidTitleLiteral` messageId.
  Coerce-to-string runtime values like "true" / "null" / "42" don't
  describe the frame contents, regardless of framework behavior.
- `GlimmerStringLiteral` resolving to empty / whitespace → flagged as
  `emptyTitle` (resolution shared with the text-node case via a
  `processStaticTitle` helper). Closes a bypass that jsx-a11y already
  catches via `getLiteralPropValue`.

Both literal classes apply to the bare-mustache `title={{x}}` form AND
the single-part concat `title="{{x}}"` form.

Whitespace-only static title (`title="   "`) is now opt-out via a new
`allowWhitespaceOnlyTitle: true` schema option. ACCNAME 1.2 §4.3.2 step
2I (Tooltip) does not whitespace-trim — so a 3-space accessible name is
spec-assigned. The check stays on by default as authoring hygiene; teams
that want strict spec parity can opt out. Empty-string `title=""` and
the non-string-literal cases above are not affected by this option —
they are always flagged as correctness.

Refs:
- WCAG SC 4.1.2: https://www.w3.org/TR/UNDERSTANDING-WCAG20/ensure-compat-rsv.html
- ACCNAME 1.2 §4.3.2: https://www.w3.org/TR/accname-1.2/#computation-steps
---
 docs/rules/template-require-iframe-title.md   |  46 ++++-
 lib/rules/template-require-iframe-title.js    | 182 +++++++++++++-----
 .../rules/template-require-iframe-title.js    | 135 ++++++++++++-
 3 files changed, 309 insertions(+), 54 deletions(-)

diff --git a/docs/rules/template-require-iframe-title.md b/docs/rules/template-require-iframe-title.md
index 145f9bd4ec..fdfde0f8ec 100644
--- a/docs/rules/template-require-iframe-title.md
+++ b/docs/rules/template-require-iframe-title.md
@@ -6,9 +6,11 @@
 
 ## `<iframe>`
 
-`<iframe>` elements must have a unique title property to indicate its content to the user.
-
-This rule takes no arguments.
+`<iframe>` elements must have a unique title property so assistive
+technology can convey their content to the user. The normative
+requirement is [WCAG SC 4.1.2 (Name, Role, Value)](https://www.w3.org/TR/UNDERSTANDING-WCAG20/ensure-compat-rsv.html);
+the `title` attribute is _one sufficient technique_ for meeting it
+(sufficient technique [H64](https://www.w3.org/WAI/WCAG21/Techniques/html/H64)).
 
 ## Examples
 
@@ -27,12 +29,42 @@ This rule **forbids** the following:
 <template>
   <iframe />
   <iframe title='' />
+  <iframe title='   ' />
+  <iframe title={{null}} />
+  <iframe title={{undefined}} />
+  <iframe title={{true}} />
+  <iframe title={{false}} />
+  <iframe title={{42}} />
 </template>
 ```
 
+Whitespace-only `title` (`"   "`) is flagged by default as an
+authoring-hygiene check: HTML and ACCNAME technically permit it (step 2I
+doesn't trim), but a whitespace-only accessible name is useless in
+practice. Suppress this specific strictness via
+`allowWhitespaceOnlyTitle: true` if your codebase needs it.
+
+## Configuration
+
+- `allowWhitespaceOnlyTitle` (`boolean`, default `false`): when `true`,
+  `<iframe title="   ">` is accepted. Empty-string `title=""` and
+  non-string mustache literals (`{{null}}`, `{{undefined}}`, `{{42}}`) are
+  still flagged.
+
+```js
+module.exports = {
+  rules: {
+    'ember/template-require-iframe-title': ['error', { allowWhitespaceOnlyTitle: true }],
+  },
+};
+```
+
 ## References
 
-- [Deque University](https://dequeuniversity.com/rules/axe/1.1/frame-title)
-- [Technique H65: Using the title attribute of the frame and iframe elements](https://www.w3.org/TR/2014/NOTE-WCAG20-TECHS-20140408/H64)
-- [WCAG Success Criterion 2.4.1 - Bypass Blocks](https://www.w3.org/TR/UNDERSTANDING-WCAG20/navigation-mechanisms-skip.html)
-- [WCAG Success Criterion 4.1.2 - Name, Role, Value](https://www.w3.org/TR/UNDERSTANDING-WCAG20/ensure-compat-rsv.html)
+- [WCAG SC 4.1.2 — Name, Role, Value](https://www.w3.org/TR/UNDERSTANDING-WCAG20/ensure-compat-rsv.html)
+  — the normative requirement.
+- [WCAG Technique H64 — Using the title attribute of the iframe element](https://www.w3.org/WAI/WCAG21/Techniques/html/H64)
+  — a sufficient technique for SC 4.1.2, not itself normative.
+- [WCAG Success Criterion 2.4.1 — Bypass Blocks](https://www.w3.org/TR/UNDERSTANDING-WCAG20/navigation-mechanisms-skip.html)
+- [ACCNAME 1.2 — accessible-name computation](https://www.w3.org/TR/accname-1.2/)
+- [axe-core rule `frame-title`](https://dequeuniversity.com/rules/axe/4.10/frame-title)
diff --git a/lib/rules/template-require-iframe-title.js b/lib/rules/template-require-iframe-title.js
index d4f4b2f636..0520c09086 100644
--- a/lib/rules/template-require-iframe-title.js
+++ b/lib/rules/template-require-iframe-title.js
@@ -1,3 +1,43 @@
+'use strict';
+
+// Non-string literal AST nodes (boolean/null/undefined/number) don't represent
+// a meaningful author-provided title. Even though they would coerce to strings
+// at runtime (e.g. `true` → "true", `42` → "42"), those strings do not describe
+// the frame's content — the rule rejects the literal forms.
+const INVALID_LITERAL_TYPES = new Set([
+  'GlimmerBooleanLiteral',
+  'GlimmerNullLiteral',
+  'GlimmerUndefinedLiteral',
+  'GlimmerNumberLiteral',
+]);
+
+function isInvalidTitleLiteralPath(path) {
+  return INVALID_LITERAL_TYPES.has(path?.type);
+}
+
+function getInvalidLiteralType(path) {
+  if (!path) {
+    return undefined;
+  }
+  switch (path.type) {
+    case 'GlimmerBooleanLiteral': {
+      return 'boolean';
+    }
+    case 'GlimmerNullLiteral': {
+      return 'null';
+    }
+    case 'GlimmerUndefinedLiteral': {
+      return 'undefined';
+    }
+    case 'GlimmerNumberLiteral': {
+      return 'number';
+    }
+    default: {
+      return undefined;
+    }
+  }
+}
+
 /** @type {import('eslint').Rule.RuleModule} */
 module.exports = {
   meta: {
@@ -8,13 +48,25 @@ module.exports = {
       url: 'https://github.com/ember-cli/eslint-plugin-ember/tree/master/docs/rules/template-require-iframe-title.md',
       templateMode: 'both',
     },
-    schema: [],
+    fixable: null,
+    schema: [
+      {
+        type: 'object',
+        properties: {
+          allowWhitespaceOnlyTitle: {
+            type: 'boolean',
+          },
+        },
+        additionalProperties: false,
+      },
+    ],
     messages: {
-      // Four messageIds (missingTitle, emptyTitle, dynamicFalseTitle,
-      // duplicateTitle) for richer diagnostic detail.
+      // Five messageIds (missingTitle, emptyTitle, invalidTitleLiteral,
+      // duplicateTitleFirst, duplicateTitleOther) for richer diagnostic detail.
       missingTitle: '<iframe> elements must have a unique title property.',
       emptyTitle: '<iframe> elements must have a unique title property.',
-      dynamicFalseTitle: '<iframe> elements must have a unique title property.',
+      invalidTitleLiteral:
+        '<iframe title> must be a non-empty string. Got {{literalType}} literal, which does not describe the frame contents.',
       duplicateTitleFirst: 'This title is not unique. #{{index}}',
       duplicateTitleOther:
         '<iframe> elements must have a unique title property. Value title="{{title}}" already used for different iframe. #{{index}}',
@@ -27,6 +79,14 @@ module.exports = {
     },
   },
   create(context) {
+    // Whitespace-only `title="   "` is technically spec-compliant: ACCNAME
+    // 1.2 step 2I (Tooltip) does not whitespace-trim like step 2D
+    // (aria-label) does, so a 3-space accessible name is assigned. That is
+    // useless in practice but not a spec violation. Default behavior flags
+    // it as authoring hygiene; set `allowWhitespaceOnlyTitle: true` to
+    // align with spec/peer behavior.
+    const allowWhitespaceOnlyTitle = Boolean(context.options[0]?.allowWhitespaceOnlyTitle);
+
     // Each entry: { value, node, index }
     //  - value: trimmed title string
     //  - node: original element node for the first occurrence
@@ -34,6 +94,44 @@ module.exports = {
     const knownTitles = [];
     let nextDuplicateIndex = 1;
 
+    // Process a statically-known title string (from a text node OR a
+    // mustache string literal OR a single-part concat). Handles the empty /
+    // whitespace / duplicate logic that's shared across those AST shapes.
+    function processStaticTitle(node, raw) {
+      const value = raw.trim();
+      if (value.length === 0) {
+        // Empty-string title always fails: no accessible name for screen readers.
+        // Whitespace-only titles are controlled by `allowWhitespaceOnlyTitle`.
+        if (raw.length === 0 || !allowWhitespaceOnlyTitle) {
+          context.report({ node, messageId: 'emptyTitle' });
+        }
+        return;
+      }
+      // Duplicate check — reports BOTH the first and the current occurrence
+      // on every collision, sharing a `#N` index so users can correlate them.
+      // For three or more duplicates the first occurrence is therefore
+      // re-reported once per collision.
+      const existing = knownTitles.find((entry) => entry.value === value);
+      if (existing) {
+        if (existing.index === null) {
+          existing.index = nextDuplicateIndex++;
+        }
+        const index = existing.index;
+        context.report({
+          node: existing.node,
+          messageId: 'duplicateTitleFirst',
+          data: { index: String(index) },
+        });
+        context.report({
+          node,
+          messageId: 'duplicateTitleOther',
+          data: { title: raw, index: String(index) },
+        });
+      } else {
+        knownTitles.push({ value, node, index: null });
+      }
+    }
+
     return {
       GlimmerElementNode(node) {
         if (node.tag !== 'iframe') {
@@ -57,57 +155,55 @@ module.exports = {
         if (titleAttr.value) {
           switch (titleAttr.value.type) {
             case 'GlimmerTextNode': {
-              const value = titleAttr.value.chars.trim();
-              if (value.length === 0) {
-                context.report({ node, messageId: 'emptyTitle' });
-              } else {
-                // Check for duplicate titles. Reports BOTH the first and the
-                // current occurrence on every collision, sharing a `#N` index
-                // so users can correlate them. For three or more duplicates
-                // the first occurrence is therefore re-reported once per
-                // collision.
-                const existing = knownTitles.find((entry) => entry.value === value);
-                if (existing) {
-                  if (existing.index === null) {
-                    existing.index = nextDuplicateIndex++;
-                  }
-                  const index = existing.index;
-
-                  // Report on the first occurrence on every collision.
-                  context.report({
-                    node: existing.node,
-                    messageId: 'duplicateTitleFirst',
-                    data: { index: String(index) },
-                  });
-
-                  // Report on the current (duplicate) occurrence.
-                  context.report({
-                    node,
-                    messageId: 'duplicateTitleOther',
-                    data: { title: titleAttr.value.chars, index: String(index) },
-                  });
-                } else {
-                  knownTitles.push({ value, node, index: null });
-                }
-              }
+              processStaticTitle(node, titleAttr.value.chars);
               break;
             }
             case 'GlimmerMustacheStatement': {
-              // title={{false}} → BooleanLiteral false is invalid
-              if (titleAttr.value.path?.type === 'GlimmerBooleanLiteral') {
-                context.report({ node, messageId: 'dynamicFalseTitle' });
+              // Non-string literal mustaches — boolean / null / undefined /
+              // number — get a specific "invalidTitleLiteral" diagnostic
+              // because the literal coerces to a string at runtime that
+              // doesn't describe the frame contents.
+              if (isInvalidTitleLiteralPath(titleAttr.value.path)) {
+                context.report({
+                  node,
+                  messageId: 'invalidTitleLiteral',
+                  data: { literalType: getInvalidLiteralType(titleAttr.value.path) },
+                });
+                break;
+              }
+              // String-literal mustaches resolve to their static value — a
+              // non-empty literal supplies an accessible name the same as a
+              // text node. Empty / whitespace literals are flagged the same
+              // way as `title=""` / `title="   "`.
+              if (titleAttr.value.path?.type === 'GlimmerStringLiteral') {
+                processStaticTitle(node, titleAttr.value.path.value);
               }
               break;
             }
             case 'GlimmerConcatStatement': {
-              // title="{{false}}" → ConcatStatement with single BooleanLiteral part
               const parts = titleAttr.value.parts || [];
+              // Single-part concat wrapping a non-string literal — same
+              // diagnostic as the bare mustache form.
+              if (
+                parts.length === 1 &&
+                parts[0].type === 'GlimmerMustacheStatement' &&
+                isInvalidTitleLiteralPath(parts[0].path)
+              ) {
+                context.report({
+                  node,
+                  messageId: 'invalidTitleLiteral',
+                  data: { literalType: getInvalidLiteralType(parts[0].path) },
+                });
+                break;
+              }
+              // Single-part concat wrapping a string literal — resolve to
+              // the static value and apply the same checks as a text node.
               if (
                 parts.length === 1 &&
                 parts[0].type === 'GlimmerMustacheStatement' &&
-                parts[0].path?.type === 'GlimmerBooleanLiteral'
+                parts[0].path?.type === 'GlimmerStringLiteral'
               ) {
-                context.report({ node, messageId: 'dynamicFalseTitle' });
+                processStaticTitle(node, parts[0].path.value);
               }
               break;
             }
diff --git a/tests/lib/rules/template-require-iframe-title.js b/tests/lib/rules/template-require-iframe-title.js
index 25d4f9545a..06a17b56c3 100644
--- a/tests/lib/rules/template-require-iframe-title.js
+++ b/tests/lib/rules/template-require-iframe-title.js
@@ -17,7 +17,15 @@ ruleTester.run('template-require-iframe-title', rule, {
     '<template><iframe title={{someValue}} /></template>',
     '<template><iframe title="" aria-hidden /></template>',
     '<template><iframe title="" hidden /></template>',
+    // Mustache string literals resolve to their static value — non-empty
+    // literals supply an accessible name the same as a text node.
+    '<template><iframe title={{"My frame"}} /></template>',
     '<template><iframe title="foo" /><iframe title="bar" /></template>',
+    // allowWhitespaceOnlyTitle: true — whitespace-only accepted.
+    {
+      code: '<template><iframe title="   " /></template>',
+      options: [{ allowWhitespaceOnlyTitle: true }],
+    },
   ],
   invalid: [
     {
@@ -30,6 +38,20 @@ ruleTester.run('template-require-iframe-title', rule, {
       output: null,
       errors: [{ messageId: 'emptyTitle' }],
     },
+    // Empty string-literal mustaches and concat-with-empty-string-literal
+    // resolve to "" via the static-attr-value handling and are flagged the
+    // same as the text-node empty case. Closes a bypass jsx-a11y already
+    // catches via getLiteralPropValue.
+    {
+      code: '<template><iframe title={{""}} /></template>',
+      output: null,
+      errors: [{ messageId: 'emptyTitle' }],
+    },
+    {
+      code: '<template><iframe title="{{""}}" /></template>',
+      output: null,
+      errors: [{ messageId: 'emptyTitle' }],
+    },
 
     {
       // Both occurrences are reported with a shared `#N` index.
@@ -92,18 +114,65 @@ ruleTester.run('template-require-iframe-title', rule, {
     {
       code: '<template><iframe src="12" title={{false}} /></template>',
       output: null,
-      errors: [{ messageId: 'dynamicFalseTitle' }],
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'boolean' } }],
     },
     {
       code: '<template><iframe src="12" title="{{false}}" /></template>',
       output: null,
-      errors: [{ messageId: 'dynamicFalseTitle' }],
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'boolean' } }],
     },
     {
       code: '<template><iframe src="12" title="" /></template>',
       output: null,
       errors: [{ messageId: 'emptyTitle' }],
     },
+
+    // Mustache literals that don't coerce to a useful accessible name.
+    {
+      code: '<template><iframe title={{null}} /></template>',
+      output: null,
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'null' } }],
+    },
+    {
+      code: '<template><iframe title={{undefined}} /></template>',
+      output: null,
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'undefined' } }],
+    },
+    {
+      code: '<template><iframe title={{42}} /></template>',
+      output: null,
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'number' } }],
+    },
+    {
+      code: '<template><iframe title="{{null}}" /></template>',
+      output: null,
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'null' } }],
+    },
+    {
+      code: '<template><iframe title="{{undefined}}" /></template>',
+      output: null,
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'undefined' } }],
+    },
+    {
+      code: '<template><iframe title="{{42}}" /></template>',
+      output: null,
+      errors: [{ messageId: 'invalidTitleLiteral', data: { literalType: 'number' } }],
+    },
+
+    // Whitespace-only title is flagged by default (authoring hygiene).
+    {
+      code: '<template><iframe title="   " /></template>',
+      output: null,
+      errors: [{ messageId: 'emptyTitle' }],
+    },
+    // Empty-string title is flagged even with allowWhitespaceOnlyTitle: true
+    // (an empty string is not a whitespace string).
+    {
+      code: '<template><iframe title="" /></template>',
+      output: null,
+      options: [{ allowWhitespaceOnlyTitle: true }],
+      errors: [{ messageId: 'emptyTitle' }],
+    },
   ],
 });
 
@@ -122,6 +191,11 @@ hbsRuleTester.run('template-require-iframe-title', rule, {
     '<iframe title="" aria-hidden />',
     '<iframe title="" hidden />',
     '<iframe title="foo" /><iframe title="bar" />',
+    // allowWhitespaceOnlyTitle: true — whitespace-only accepted in HBS too.
+    {
+      code: '<iframe title="   " />',
+      options: [{ allowWhitespaceOnlyTitle: true }],
+    },
   ],
   invalid: [
     {
@@ -177,17 +251,70 @@ hbsRuleTester.run('template-require-iframe-title', rule, {
     {
       code: '<iframe src="12" title={{false}} />',
       output: null,
-      errors: [{ message: '<iframe> elements must have a unique title property.' }],
+      errors: [
+        {
+          message:
+            '<iframe title> must be a non-empty string. Got boolean literal, which does not describe the frame contents.',
+        },
+      ],
     },
     {
       code: '<iframe src="12" title="{{false}}" />',
       output: null,
-      errors: [{ message: '<iframe> elements must have a unique title property.' }],
+      errors: [
+        {
+          message:
+            '<iframe title> must be a non-empty string. Got boolean literal, which does not describe the frame contents.',
+        },
+      ],
     },
     {
       code: '<iframe src="12" title="" />',
       output: null,
       errors: [{ message: '<iframe> elements must have a unique title property.' }],
     },
+
+    // hbs parity with gjs for the other non-string mustache literals
+    // (boolean true / null / undefined / number).
+    {
+      code: '<iframe title={{true}} />',
+      output: null,
+      errors: [
+        {
+          message:
+            '<iframe title> must be a non-empty string. Got boolean literal, which does not describe the frame contents.',
+        },
+      ],
+    },
+    {
+      code: '<iframe title={{null}} />',
+      output: null,
+      errors: [
+        {
+          message:
+            '<iframe title> must be a non-empty string. Got null literal, which does not describe the frame contents.',
+        },
+      ],
+    },
+    {
+      code: '<iframe title={{undefined}} />',
+      output: null,
+      errors: [
+        {
+          message:
+            '<iframe title> must be a non-empty string. Got undefined literal, which does not describe the frame contents.',
+        },
+      ],
+    },
+    {
+      code: '<iframe title={{42}} />',
+      output: null,
+      errors: [
+        {
+          message:
+            '<iframe title> must be a non-empty string. Got number literal, which does not describe the frame contents.',
+        },
+      ],
+    },
   ],
 });

From 634af79f587234f09539848cbd0f7d2ef28d3ac9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johan=20R=C3=B8ed?= <johanroed@gmail.com>
Date: Sat, 25 Apr 2026 17:12:27 +0200
Subject: [PATCH 3/3] refactor(template-require-iframe-title): remove
 allowWhitespaceOnlyTitle option

Whitespace-only titles are never intentional and the option added API
surface with no real-world use case. Always flag empty/whitespace title
values as errors.
---
 docs/rules/template-require-iframe-title.md   | 21 ---------------
 lib/rules/template-require-iframe-title.js    | 26 ++-----------------
 .../rules/template-require-iframe-title.js    | 18 -------------
 3 files changed, 2 insertions(+), 63 deletions(-)

diff --git a/docs/rules/template-require-iframe-title.md b/docs/rules/template-require-iframe-title.md
index fdfde0f8ec..fec30d7a63 100644
--- a/docs/rules/template-require-iframe-title.md
+++ b/docs/rules/template-require-iframe-title.md
@@ -38,27 +38,6 @@ This rule **forbids** the following:
 </template>
 ```
 
-Whitespace-only `title` (`"   "`) is flagged by default as an
-authoring-hygiene check: HTML and ACCNAME technically permit it (step 2I
-doesn't trim), but a whitespace-only accessible name is useless in
-practice. Suppress this specific strictness via
-`allowWhitespaceOnlyTitle: true` if your codebase needs it.
-
-## Configuration
-
-- `allowWhitespaceOnlyTitle` (`boolean`, default `false`): when `true`,
-  `<iframe title="   ">` is accepted. Empty-string `title=""` and
-  non-string mustache literals (`{{null}}`, `{{undefined}}`, `{{42}}`) are
-  still flagged.
-
-```js
-module.exports = {
-  rules: {
-    'ember/template-require-iframe-title': ['error', { allowWhitespaceOnlyTitle: true }],
-  },
-};
-```
-
 ## References
 
 - [WCAG SC 4.1.2 — Name, Role, Value](https://www.w3.org/TR/UNDERSTANDING-WCAG20/ensure-compat-rsv.html)
diff --git a/lib/rules/template-require-iframe-title.js b/lib/rules/template-require-iframe-title.js
index 0520c09086..0be3d19f7d 100644
--- a/lib/rules/template-require-iframe-title.js
+++ b/lib/rules/template-require-iframe-title.js
@@ -49,17 +49,7 @@ module.exports = {
       templateMode: 'both',
     },
     fixable: null,
-    schema: [
-      {
-        type: 'object',
-        properties: {
-          allowWhitespaceOnlyTitle: {
-            type: 'boolean',
-          },
-        },
-        additionalProperties: false,
-      },
-    ],
+    schema: [],
     messages: {
       // Five messageIds (missingTitle, emptyTitle, invalidTitleLiteral,
       // duplicateTitleFirst, duplicateTitleOther) for richer diagnostic detail.
@@ -79,14 +69,6 @@ module.exports = {
     },
   },
   create(context) {
-    // Whitespace-only `title="   "` is technically spec-compliant: ACCNAME
-    // 1.2 step 2I (Tooltip) does not whitespace-trim like step 2D
-    // (aria-label) does, so a 3-space accessible name is assigned. That is
-    // useless in practice but not a spec violation. Default behavior flags
-    // it as authoring hygiene; set `allowWhitespaceOnlyTitle: true` to
-    // align with spec/peer behavior.
-    const allowWhitespaceOnlyTitle = Boolean(context.options[0]?.allowWhitespaceOnlyTitle);
-
     // Each entry: { value, node, index }
     //  - value: trimmed title string
     //  - node: original element node for the first occurrence
@@ -100,11 +82,7 @@ module.exports = {
     function processStaticTitle(node, raw) {
       const value = raw.trim();
       if (value.length === 0) {
-        // Empty-string title always fails: no accessible name for screen readers.
-        // Whitespace-only titles are controlled by `allowWhitespaceOnlyTitle`.
-        if (raw.length === 0 || !allowWhitespaceOnlyTitle) {
-          context.report({ node, messageId: 'emptyTitle' });
-        }
+        context.report({ node, messageId: 'emptyTitle' });
         return;
       }
       // Duplicate check — reports BOTH the first and the current occurrence
diff --git a/tests/lib/rules/template-require-iframe-title.js b/tests/lib/rules/template-require-iframe-title.js
index 06a17b56c3..1146537e0f 100644
--- a/tests/lib/rules/template-require-iframe-title.js
+++ b/tests/lib/rules/template-require-iframe-title.js
@@ -21,11 +21,6 @@ ruleTester.run('template-require-iframe-title', rule, {
     // literals supply an accessible name the same as a text node.
     '<template><iframe title={{"My frame"}} /></template>',
     '<template><iframe title="foo" /><iframe title="bar" /></template>',
-    // allowWhitespaceOnlyTitle: true — whitespace-only accepted.
-    {
-      code: '<template><iframe title="   " /></template>',
-      options: [{ allowWhitespaceOnlyTitle: true }],
-    },
   ],
   invalid: [
     {
@@ -165,14 +160,6 @@ ruleTester.run('template-require-iframe-title', rule, {
       output: null,
       errors: [{ messageId: 'emptyTitle' }],
     },
-    // Empty-string title is flagged even with allowWhitespaceOnlyTitle: true
-    // (an empty string is not a whitespace string).
-    {
-      code: '<template><iframe title="" /></template>',
-      output: null,
-      options: [{ allowWhitespaceOnlyTitle: true }],
-      errors: [{ messageId: 'emptyTitle' }],
-    },
   ],
 });
 
@@ -191,11 +178,6 @@ hbsRuleTester.run('template-require-iframe-title', rule, {
     '<iframe title="" aria-hidden />',
     '<iframe title="" hidden />',
     '<iframe title="foo" /><iframe title="bar" />',
-    // allowWhitespaceOnlyTitle: true — whitespace-only accepted in HBS too.
-    {
-      code: '<iframe title="   " />',
-      options: [{ allowWhitespaceOnlyTitle: true }],
-    },
   ],
   invalid: [
     {