From ab00241ba214053242830d478402eef7dc18632c Mon Sep 17 00:00:00 2001
From: Bryce Kwon <bryce@brycekwon.com>
Date: Thu, 5 Nov 2026 19:46:47 -1000
Subject: Read the login form table as layout

---
 custom/extensions/auth-file.lua   | 2 +-
 custom/extensions/auth-inline.lua | 2 +-
 tests/extensions/test-auth.lua    | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/custom/extensions/auth-file.lua b/custom/extensions/auth-file.lua
index fc6d2fc..6cbb8e8 100644
--- a/custom/extensions/auth-file.lua
+++ b/custom/extensions/auth-file.lua
@@ -560,7 +560,7 @@ function body()
 	html("<input type='hidden' name='redirect' value='")
 	html_attr(token)
 	html("'>")
-	html("<table>")
+	html("<table role='presentation'>")
 	html("<tr><td><label for='username'>Username:</label></td><td>")
 	html("<input id='username' name='username' type='text'")
 	html(" autocomplete='username' autofocus></td></tr>")
diff --git a/custom/extensions/auth-inline.lua b/custom/extensions/auth-inline.lua
index 87c2a8a..b97bb27 100644
--- a/custom/extensions/auth-inline.lua
+++ b/custom/extensions/auth-inline.lua
@@ -523,7 +523,7 @@ function body()
 	html("<input type='hidden' name='redirect' value='")
 	html_attr(token)
 	html("'>")
-	html("<table>")
+	html("<table role='presentation'>")
 	html("<tr><td><label for='username'>Username:</label></td><td>")
 	html("<input id='username' name='username' type='text'")
 	html(" autocomplete='username' autofocus></td></tr>")
diff --git a/tests/extensions/test-auth.lua b/tests/extensions/test-auth.lua
index 1fb9c21..c070ba9 100644
--- a/tests/extensions/test-auth.lua
+++ b/tests/extensions/test-auth.lua
@@ -290,6 +290,7 @@ h.equals("an unknown action denies rather than raising", ret, 0)
 
 out = run_action("body", { url = "/repo/log/?q=x" })
 h.contains("the login form posts to the login url", out, "<form class='login' method='post' action='/?p=login'>")
+h.contains("and its table is read as layout, not data", out, "<table role='presentation'>")
 h.equals("a first visit says nothing failed", out:find("login-error", 1, true), nil)
 h.equals("the form carries a signed way back", way_back_in(out), "/repo/log/?q=x")
 
-- 
cgit 2.12.1