[accessibility-review] Cookie consent Customize control does not expose disclosure state

[github-actions[bot]]

Problem

The cookie banner's Customize button shows and hides #consent-details, but the button has no aria-expanded or aria-controls, and the script does not update any state attribute. Assistive-technology users cannot tell whether activating Customize opened the preferences panel. The hidden panel is also managed only with inline display, without an equivalent semantic disclosure state.

WCAG 2.2

• 4.1.2 Name, Role, Value (Level A): the control's expanded/collapsed state and controlled region must be programmatically determinable.
• 1.3.1 Info and Relationships (Level A): the relationship between the disclosure control and its content must be represented in markup.

Evidence

EssentialCSharp.Web/wwwroot/js/consent-manager.js:108-115:

<button id="consent-customize" class="btn btn-outline-primary">Customize</button>
...
<div id="consent-details" class="consent-details" style="display: none;">

showCustomizeOptions() toggles details.style.display but never updates ARIA state. Add aria-expanded="false" aria-controls="consent-details" to the button and update aria-expanded whenever the panel opens or closes. Prefer the hidden attribute (or a matching semantic disclosure pattern) for the panel's collapsed state.

Warning

Firewall blocked 7 domains

The following domains were blocked by the firewall during workflow execution:

• accounts.google.com
• android.clients.google.com
• clients2.google.com
• update.googleapis.com
• www.google.com
• www.gstatic.com
• www.microsoft.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "update.googleapis.com"
    - "www.google.com"
    - "www.gstatic.com"
    - "www.microsoft.com"

See Network Configuration for more information.

Generated by Accessibility Review · copilot · gpt56 · 18.6 AIC · ⌖ 2.87 AIC · ⊞ 29K · ◷

_{Add this agentic workflow to your repo}

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/accessibility-review.md@5d11aa2a05ce2c943c085acb7b12b583f83ed375

• expires on Oct 11, 2026, 8:39 AM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-10-11T08:39:09.554Z.

Closed by Workflow