I'm going to mark this as sec-high, because it looks like it will just dispatch whatever event. It does set MarkAsHandledInRemoteProcess(), which kind of feels like it less concerning, but I only see that [flag being checked in a substantial way in one place](https://searchfox.org/mozilla-central/rev/e77d89c414eac63a295a2124600045775a6f4715/dom/events/EventStateManager.cpp#1396), in EventStateManager::WalkESMTreeToHandleAccessKey(), so it feels like that won't always protect us against a hostile content process? We can lower the rating if I'm wrong, as I don't really know anything about these events.
Bug 1832306 Comment 5 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
I'm going to mark this as sec-high, because it looks like it will just dispatch whatever event. It does set MarkAsHandledInRemoteProcess(), which kind of feels like it makes it less concerning, but I only see that [flag being checked in a substantial way in one place](https://searchfox.org/mozilla-central/rev/e77d89c414eac63a295a2124600045775a6f4715/dom/events/EventStateManager.cpp#1396), in EventStateManager::WalkESMTreeToHandleAccessKey(), so it feels like that won't always protect us against a hostile content process? We can lower the rating if I'm wrong, as I don't really know anything about these events.