bool HTMLAnchorElement::draggable() const
{
    const AtomicString& value = getAttribute(draggableAttr);
    if (equalIgnoringCase(value, "true"))
        return true;
    if (equalIgnoringCase(value, "false"))
        return false;
    return hasAttribute(hrefAttr);
}

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.