{ "url": "https://www.disneyplus.com", "auditedAt": "2026-07-17T22:04:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete representative audit of the public UK landing, plan, login-entry, and recovery surfaces. Authenticated playback, payment submission, account cancellation, and media captions were not covered because they require an account or transaction.", "page": { "appType": "hybrid", "framework": "Next.js", "notes": "Public UK marketing and commerce surface redirects to /en-gb. Fresh homepage loads show a OneTrust consent dialog." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "lighthouse" ], "guidanceConsulted": [ "dark-mode", "accessibility", "performance", "identify-heavy-scripts", "optimize-image-priority", "privacy", "security", "forms", "passkeys", "html", "fluid-scaling", "improve-text-layout-and-legibility", "visually-stable-font-fallbacks", "deliver-optimized-decorative-images", "efficient-background-processing", "manage-recurring-intervals" ], "artifacts": [ { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F11" ] }, { "type": "discoverability", "path": "evidence/discoverability", "caption": "discoverability", "findingIds": [ "F14" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [ "F14" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/focus.json", "caption": "focus", "findingIds": [] }, { "type": "screenshot", "path": "evidence/forced-colors.png", "caption": "forced colors", "findingIds": [] }, { "type": "other", "path": "evidence/guidance.md", "caption": "guidance", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F10" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [ "F15" ] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post", "findingIds": [ "F15" ] }, { "type": "screenshot", "path": "evidence/home-content.png", "caption": "home content", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F01", "F02", "F17" ] }, { "type": "screenshot", "path": "evidence/home-dismissed.png", "caption": "home dismissed", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F01", "F05" ] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F08", "F13", "F17" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F07" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [ "F07" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F08" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F13" ] }, { "type": "other", "path": "evidence/jwt-context.json", "caption": "jwt context", "findingIds": [] }, { "type": "layout", "path": "evidence/layout-desktop.json", "caption": "layout desktop", "findingIds": [ "F04" ] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "layout mobile", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-details.json", "caption": "lighthouse details", "findingIds": [ "F09", "F16" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-failures.json", "caption": "lighthouse failures", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [ "F07", "F08", "F09", "F16" ] }, { "type": "other", "path": "evidence/login-invalid.json", "caption": "login invalid", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-invalid.png", "caption": "login invalid", "findingIds": [] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "login probe", "findingIds": [ "F12" ] }, { "type": "screenshot", "path": "evidence/login.png", "caption": "login", "findingIds": [ "F03", "F12" ] }, { "type": "other", "path": "evidence/not-found.json", "caption": "not found", "findingIds": [] }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "not found", "findingIds": [] }, { "type": "other", "path": "evidence/plans-probe.json", "caption": "plans probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/plans.png", "caption": "plans", "findingIds": [] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe", "findingIds": [ "F02", "F03", "F04", "F05", "F06" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "reduced motion", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/site-files.json", "caption": "site files", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F17" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Screenshot comparison under default and prefers-color-scheme: dark remained usable and consistently dark.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Reduced-motion emulation was active; getAnimations() returned none on the loaded state.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Forced-colors screenshot retained readable text, links, controls, and focus borders.", "pathIds": [ "home" ], "artifacts": [ "evidence/forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "CSS inspection found no view-transition rules; homepage-to-login is a full abrupt route change.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/login.png" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "No scroll-linked animation was present on the representative public pages, so there is no implementation to assess.", "reason": "No scroll-linked animation was present on the representative public pages, so there is no implementation to assess." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Native DETAILS/SUMMARY interactions are used and no custom pointer-driven gesture handler was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The page is 5,057px tall at desktop, while CSS inspection found no scroll-state queries or progress affordance.", "pathIds": [ "home" ], "artifacts": [ "evidence/layout-desktop.json", "evidence/platform-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "No tooltip, anchored popover, or viewport-edge menu was present in the tested public flow.", "reason": "No tooltip, anchored popover, or viewport-edge menu was present in the tested public flow." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Headings, plan links, FAQ disclosure state, and recovery links provide clear directional cues.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Desktop and mobile screenshots show a modal consent wall covering the hero; on 360x800 it occupies nearly the entire viewport.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F01" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The platform probe found two DIV role=dialog aria-modal=true overlays and no dialog element.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F02" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Outside the consent interruption, the visual hierarchy is content-led with restrained persistent chrome.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "At 360x800, scrollWidth equalled clientWidth (360px), with zero horizontal overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The mobile layout avoids overflow, but CSS inspection found no @container rules despite reusable plan and media-card components.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The target probe found Learn more links at 14px high and many footer links at 22px high.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The hero states the streaming offer and exposes SIGN UP NOW plus LOG IN.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Plan and login entry paths loaded successfully with clear pricing/identity progression; payment was intentionally not submitted.", "pathIds": [ "home" ], "artifacts": [ "evidence/plans.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "A nonexistent route rendered a specific error, explanation, and DISNEY+ HOME recovery link.", "pathIds": [ "home" ], "artifacts": [ "evidence/not-found.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Lighthouse measured FCP 8.4s, LCP 30.8s, TBT 580ms and performance 0.41; the first-party trace still measured LCP 5.18s.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Layout observers measured CLS 0 on desktop and mobile.", "pathIds": [ "home" ], "artifacts": [ "evidence/layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Lighthouse measured FCP 8.4s, LCP 30.8s, TBT 580ms and performance 0.41; the first-party trace still measured LCP 5.18s. HAR recorded 1.47MB of script transfer and a 1,009,508-byte _app chunk; Lighthouse estimated 581KiB unused JavaScript and 66KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json", "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F07", "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Lighthouse measured FCP 8.4s, LCP 30.8s, TBT 580ms and performance 0.41; the first-party trace still measured LCP 5.18s. HAR recorded 1.47MB of script transfer and a 1,009,508-byte _app chunk; Lighthouse estimated 581KiB unused JavaScript and 66KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json", "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F07", "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "HAR recorded 1.47MB of script transfer and a 1,009,508-byte _app chunk; Lighthouse estimated 581KiB unused JavaScript and 66KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Lighthouse accessibility was 0.99 but failed heading-order and label-content-name-mismatch; the overall heading sequence is not strictly descending.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-details.json", "evidence/lighthouse.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Lighthouse accessibility scored 0.99 and did not report a contrast failure; forced-colors remained legible.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Lighthouse accessibility was 0.99 but failed heading-order and label-content-name-mismatch; the overall heading sequence is not strictly descending.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-details.json", "evidence/lighthouse.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Images had alt text, labels were present on login, focus-visible produced an outline, and text remained readable.", "pathIds": [ "home" ], "artifacts": [ "evidence/focus.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The target probe found Learn more links at 14px high and many footer links at 22px high.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Lighthouse did not report console-error or uncaught-exception failures.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The image primitive found 22/43 images missing dimensions, 17 oversized, and 19 without srcset; the logo source was 3837px wide for a 91px display.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Lighthouse found three BFCache failure reasons and Inspector Issues; best-practices scored 0.77.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-details.json", "evidence/lighthouse.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The page exposes title, description, canonical, JSON-LD, Open Graph, sitemap and bot-specific robots allowances.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Discoverability measured 52% rendered-word coverage; the raw response lacked the final title and H1, although server HTML was not an empty shell and bot-specific robots rules allow indexing.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ], "findingIds": [ "F14" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The page exposes title, description, canonical, JSON-LD, Open Graph, sitemap and bot-specific robots allowances.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The page exposes title, description, canonical, JSON-LD, Open Graph, sitemap and bot-specific robots allowances.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The headers primitive found no CSP, HSTS, X-Content-Type-Options, frame protection, Referrer-Policy, or Permissions-Policy. Cookie inspection found OptanonConsent and _dd_s without Secure on an HTTPS-only property.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F10", "F11" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The consent copy states 77 partners; HAR recorded 91 cross-origin requests and 2.62MB cross-origin transfer, including consent and logging services, though the tracker matcher found no known tracker domains.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "findingIds": [ "F17" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The login probe found autocomplete=\"\" on the email field and no visible passkey path on the tested entry screen.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/login.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The headers primitive found no CSP, HSTS, X-Content-Type-Options, frame protection, Referrer-Policy, or Permissions-Policy.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "Discoverability measured 52% rendered-word coverage; the raw response lacked the final title and H1, although server HTML was not an empty shell and bot-specific robots rules allow indexing.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ], "findingIds": [ "F14" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "FAQ controls use native SUMMARY elements and the tested 404 state provides recovery.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "Video streaming and account commerce are intrinsically online; a manifest exists, but offline playback is not a reasonable public landing-page requirement.", "reason": "Video streaming and account commerce are intrinsically online; a manifest exists, but offline playback is not a reasonable public landing-page requirement." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The tested nonexistent route produced a clear message and home recovery action rather than a blank shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/not-found.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The localized /en-gb page declares html lang=en and rendered left-to-right English correctly.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "The tested public paths rendered no dates, currencies requiring locale transformation, or numeric data entry.", "reason": "The tested public paths rendered no dates, currencies requiring locale transformation, or numeric data entry." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "The tested public paths expose no event scheduling or time-zone-sensitive values.", "reason": "The tested public paths expose no event scheduling or time-zone-sensitive values." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The mobile consent surface gives Accept All and Reject All equal visual prominence and provides customization.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The login field has a visible label and the browser flow did not show premature errors before interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/login.png" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The login probe found autocomplete=\"\" on the email field and no visible passkey path on the tested entry screen.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/login.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "The tested plans and login entry pages identify plan pricing and explain the MyDisney account transition.", "pathIds": [ "home" ], "artifacts": [ "evidence/plans.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The image primitive found 22/43 images missing dimensions, 17 oversized, and 19 without srcset; the logo source was 3837px wide for a 91px display.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "HAR recorded 1.47MB of script transfer and a 1,009,508-byte _app chunk; Lighthouse estimated 581KiB unused JavaScript and 66KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The image primitive found 22/43 images missing dimensions, 17 oversized, and 19 without srcset; the logo source was 3837px wide for a 91px display. The consent copy states 77 partners; HAR recorded 91 cross-origin requests and 2.62MB cross-origin transfer, including consent and logging services, though the tracker matcher found no known tracker domains.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "findingIds": [ "F13", "F17" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "No declared agent-facing surface was found; this emerging capability is contextual and is not required for the public streaming landing page.", "reason": "No declared agent-facing surface was found; this emerging capability is contextual and is not required for the public streaming landing page." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement against representative public paths", "evidence": "No summarisation or language-model task is part of the tested public journey; on-device inference is not applicable.", "reason": "No summarisation or language-model task is part of the tested public journey; on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "low", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Ten native FAQ open/close cycles produced no Detached* constructor among top retained constructors; separate-load variance limits confidence.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Direct browser evidence and artifact inspection", "evidence": "The baseline heap summary contained 736,670 nodes and 42.6MB self size; the interaction variant reached 867,880 nodes and 50.3MB, though separate-load variance lowers causal confidence.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ], "findingIds": [ "F15" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "low", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, layout, discoverability, or heap evidence as applicable", "evidence": "Neither heap summary exposed Detached* constructors among the top retained groups.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "pass" }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F06" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F16" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F14" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11", "F17", "F12" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F14" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F12" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F13", "F08", "F17" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged contextual and not applicable to the tested public journey." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F15" ] } ], "paths": [ { "id": "home", "description": "Public UK landing page: hero, catalogue rows, pricing entry points, FAQ, footer, consent, responsive and preference conditions.", "url": "https://www.disneyplus.com/en-gb", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus", "no-JS/raw HTML" ], "result": "issues" }, { "id": "plans", "description": "Subscription plan-selection archetype, representing pricing and commercial commitment disclosure.", "url": "https://www.disneyplus.com/commerce/plans", "conditions": [ "desktop", "fresh consent state" ], "result": "issues" }, { "id": "login", "description": "MyDisney login-entry form, representing authentication and input assistance.", "url": "https://www.disneyplus.com/identity/login", "conditions": [ "desktop", "empty-input interaction" ], "result": "issues" }, { "id": "not-found", "description": "Invalid route, representing HTTP/navigation failure recovery.", "url": "https://www.disneyplus.com/not-a-real-route-web-uplift", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "summary": "The privacy prompt obscures the primary content on every fresh visit.", "evidence": "Desktop and mobile screenshots show a modal consent wall covering the hero; on 360x800 it occupies nearly the entire viewport.", "suggestedFix": "Use a compact, content-preserving consent surface with equally prominent accept/reject controls and defer non-essential partner processing until choice.", "guidanceId": "light-dismiss-a-dialog", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F02", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "summary": "The consent experience is a custom ARIA dialog rather than the platform dialog primitive.", "evidence": "The platform probe found two DIV role=dialog aria-modal=true overlays and no dialog element.", "suggestedFix": "Use a native dialog with showModal(), a labelled heading, predictable focus return, and platform dismissal behavior where legally appropriate.", "guidanceId": "html", "artifacts": [ "evidence/platform-probe.json", "evidence/home-desktop.png" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "summary": "Primary route changes do not expose View Transition styling.", "evidence": "CSS inspection found no view-transition rules; homepage-to-login is a full abrupt route change.", "suggestedFix": "Add progressive cross-document View Transitions for public marketing-to-login/plan navigation, with reduced-motion handling.", "guidanceId": "directional-navigation-transitions", "artifacts": [ "evidence/platform-probe.json", "evidence/login.png" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "summary": "The long marketing page has no scroll-state-aware navigation affordance.", "evidence": "The page is 5,057px tall at desktop, while CSS inspection found no scroll-state queries or progress affordance.", "suggestedFix": "Use a lightweight sticky header state or scroll progress/section cue that responds declaratively to scroll position.", "guidanceId": "scrollability-affordance-hints", "artifacts": [ "evidence/layout-desktop.json", "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F05", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "summary": "Responsive behavior relies on viewport styling rather than component containment.", "evidence": "The mobile layout avoids overflow, but CSS inspection found no @container rules despite reusable plan and media-card components.", "suggestedFix": "Introduce container-type and component-scoped container queries for reused cards and plan modules.", "guidanceId": "fluid-scaling", "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F06", "severity": "medium", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "summary": "Several interactive targets are shorter than recommended touch dimensions.", "evidence": "The target probe found Learn more links at 14px high and many footer links at 22px high.", "suggestedFix": "Increase interactive hit areas to at least 24x24 CSS px, preferably 44px for primary touch controls, without enlarging text unnecessarily.", "guidanceId": "accessibility", "artifacts": [ "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F07", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "summary": "The public landing page is slow under lab conditions.", "evidence": "Lighthouse measured FCP 8.4s, LCP 30.8s, TBT 580ms and performance 0.41; the first-party trace still measured LCP 5.18s.", "suggestedFix": "Profile the LCP request chain, prioritize the hero asset, reduce startup JavaScript, and split/defer work not required for first content.", "guidanceId": "performance", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "effort": "large", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F08", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "summary": "A large JavaScript payload dominates startup.", "evidence": "HAR recorded 1.47MB of script transfer and a 1,009,508-byte _app chunk; Lighthouse estimated 581KiB unused JavaScript and 66KiB unused CSS.", "suggestedFix": "Split the monolithic app bundle by route, remove unused code, and conditionally load consent, commerce, and catalogue dependencies.", "guidanceId": "identify-heavy-scripts", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "effort": "large", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F09", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "summary": "Heading order and accessible-name consistency have defects.", "evidence": "Lighthouse accessibility was 0.99 but failed heading-order and label-content-name-mismatch; the overall heading sequence is not strictly descending.", "suggestedFix": "Repair heading levels and ensure each control’s accessible name contains its visible label.", "guidanceId": "accessibility", "artifacts": [ "evidence/lighthouse-details.json", "evidence/lighthouse.json" ], "effort": "small", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "summary": "The main document lacks baseline defensive headers.", "evidence": "The headers primitive found no CSP, HSTS, X-Content-Type-Options, frame protection, Referrer-Policy, or Permissions-Policy.", "suggestedFix": "Roll out a nonce/hash-based CSP in report-only then enforced mode; add HSTS, nosniff, frame-ancestors, Referrer-Policy and a least-privilege Permissions-Policy.", "guidanceId": "security", "artifacts": [ "evidence/headers.json" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F11", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "summary": "Two first-party cookies are set without Secure.", "evidence": "Cookie inspection found OptanonConsent and _dd_s without Secure on an HTTPS-only property.", "suggestedFix": "Set Secure on every cookie, retain appropriate SameSite, and use HttpOnly for any session-bearing value.", "guidanceId": "security", "artifacts": [ "evidence/cookies.json" ], "effort": "small", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F12", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "summary": "The login entry does not advertise passkey support and omits email autocomplete.", "evidence": "The login probe found autocomplete=\"\" on the email field and no visible passkey path on the tested entry screen.", "suggestedFix": "Set autocomplete=\"username email\" and offer a discoverable passkey/WebAuthn route where the MyDisney identity backend supports it.", "guidanceId": "passkeys", "artifacts": [ "evidence/login-probe.json", "evidence/login.png" ], "effort": "medium", "pathId": "login", "url": "https://www.disneyplus.com/identity/login" }, { "id": "F13", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "summary": "Many images are oversized or lack intrinsic/responsive metadata.", "evidence": "The image primitive found 22/43 images missing dimensions, 17 oversized, and 19 without srcset; the logo source was 3837px wide for a 91px display.", "suggestedFix": "Serve correctly sized AVIF/WebP variants, add width/height, srcset and sizes, and avoid downloading original-resolution logos.", "guidanceId": "optimize-image-priority", "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F14", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "summary": "Important rendered semantics are incomplete in raw HTML.", "evidence": "Discoverability measured 52% rendered-word coverage; the raw response lacked the final title and H1, although server HTML was not an empty shell and bot-specific robots rules allow indexing.", "suggestedFix": "Server-render the final localized title, H1 and primary link text so non-JS crawlers receive the same semantic entry point.", "guidanceId": "html", "artifacts": [ "evidence/discoverability", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F15", "severity": "medium", "confidence": "high", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "summary": "The initial page has a large memory and DOM footprint.", "evidence": "The baseline heap summary contained 736,670 nodes and 42.6MB self size; the interaction variant reached 867,880 nodes and 50.3MB, though separate-load variance lowers causal confidence.", "suggestedFix": "Reduce initial component/data retention, lazy-mount below-fold catalogue sections, and repeat heap comparisons in one persistent target to isolate retained growth.", "guidanceId": "manage-recurring-intervals", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ], "effort": "large", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F16", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "summary": "The page reports browser hygiene problems.", "evidence": "Lighthouse found three BFCache failure reasons and Inspector Issues; best-practices scored 0.77.", "suggestedFix": "Remove avoidable BFCache blockers and resolve the concrete DevTools Issues entries, then verify back/forward restoration.", "guidanceId": "html", "artifacts": [ "evidence/lighthouse-details.json", "evidence/lighthouse.json" ], "effort": "medium", "pathId": "home", "url": "https://www.disneyplus.com" }, { "id": "F17", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "summary": "The unauthenticated landing page has a broad partner and third-party surface.", "evidence": "The consent copy states 77 partners; HAR recorded 91 cross-origin requests and 2.62MB cross-origin transfer, including consent and logging services, though the tracker matcher found no known tracker domains.", "suggestedFix": "Audit every partner against necessity, load optional vendors only after consent, and minimize/batch telemetry.", "guidanceId": "privacy", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "effort": "large", "pathId": "home", "url": "https://www.disneyplus.com" } ], "taskList": [ { "id": "T1", "title": "Cut startup JavaScript and prioritize the LCP content", "priority": 1, "findingIds": [ "F07", "F08" ], "guidanceId": "performance", "status": "open" }, { "id": "T2", "title": "Deploy baseline defensive headers and secure cookie flags", "priority": 2, "findingIds": [ "F10", "F11" ], "guidanceId": "security", "status": "open" }, { "id": "T3", "title": "Reduce and defer the consent/partner footprint", "priority": 3, "findingIds": [ "F01", "F02", "F17" ], "guidanceId": "privacy", "status": "open" }, { "id": "T4", "title": "Correct image sizing and responsive delivery", "priority": 4, "findingIds": [ "F13" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T5", "title": "Server-render final localized semantics", "priority": 5, "findingIds": [ "F14" ], "guidanceId": "html", "status": "open" }, { "id": "T6", "title": "Repair heading/name semantics and touch targets", "priority": 6, "findingIds": [ "F06", "F09" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T7", "title": "Add email autocomplete and a passkey route", "priority": 7, "findingIds": [ "F12" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T8", "title": "Reduce the initial retained DOM and heap footprint", "priority": 8, "findingIds": [ "F15" ], "guidanceId": "manage-recurring-intervals", "status": "open" }, { "id": "T9", "title": "Resolve BFCache blockers and DevTools Issues", "priority": 9, "findingIds": [ "F16" ], "guidanceId": "html", "status": "open" }, { "id": "T10", "title": "Progressively enhance navigation and component adaptation", "priority": 10, "findingIds": [ "F03", "F04", "F05" ], "guidanceId": "fluid-scaling", "status": "open" } ], "budget": { "pathCount": 4, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-17T21-58-08-007Z" }