Accessibility and Security
Top Navigation Bar PLUS follows Concrete CMS and Bootstrap navigation conventions wherever possible.
Current Page
Only the currently displayed page receives:
aria-current="page"
Parent pages can remain visually active without being incorrectly announced as the current page.
Controls
Navigation toggles, language controls, account controls, search actions, and submenu controls include translated accessibility labels.
Keyboard and Focus
Standard dropdown and focus behavior is provided by the active theme and Concrete CMS frontend navigation assets.
Custom theme styles should retain visible keyboard focus indicators.
External Links
Links that open in a new browsing context receive:
rel="noopener noreferrer"
Manual external URLs are checked to reject unsafe schemes such as:
javascript:
Permissions
Page navigation, account pages, and optional stack content are filtered using Concrete CMS permissions.
Logout
Logout uses the token-protected Concrete CMS logout route.
Caching
Rendered block output is not cached because account and cart content can differ by user session. The block record itself remains cacheable.
