{ "url": "https://finance.naver.com", "auditedAt": "2026-07-18T12:27:47.328Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete remote audit of five representative public templates plus an explicit error state. Authenticated MY/account flows, order execution, localized variants, and Naver’s external identity service were not covered.", "page": { "appType": "mpa", "framework": "Legacy server-rendered MPA with embedded modern Naver services", "notes": "Public Korean finance portal. Server-rendered content is strong, but templates use fixed-width desktop CSS and EUC-KR." }, "evidenceUsed": [ "Modern Web Guidance 0.0.172 search/retrieve", "screenshot", "DOM+computed styles", "evaluate probes", "layout metrics and observers", "DevTools trace", "HAR summary", "Lighthouse", "discoverability/no-JS comparison", "security headers", "cookies", "trackers", "secrets scan", "images audit", "heap before/after comparison" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "dom", "path": "evidence/404-dom.json", "caption": "404 dom", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404.png", "caption": "404", "findingIds": [] }, { "type": "dom", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F14" ] }, { "type": "screenshot", "path": "evidence/discover-home-crawler.png", "caption": "discover home crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discover-home-rendered.png", "caption": "discover home rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discover-home.json", "caption": "discover home", "findingIds": [ "F13" ] }, { "type": "screenshot", "path": "evidence/discover-item-crawler.png", "caption": "discover item crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discover-item-rendered.png", "caption": "discover item rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discover-item.json", "caption": "discover item", "findingIds": [] }, { "type": "dom", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F14", "F15" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.json", "caption": "heap post", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F01", "F03", "F11" ] }, { "type": "dom", "path": "evidence/home-images.json", "caption": "home images", "findingIds": [ "F18" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "findingIds": [ "F04", "F12" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F04", "F05", "F06" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F10", "F16" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F09" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [ "F09" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F10" ] }, { "type": "screenshot", "path": "evidence/item-desktop.png", "caption": "item desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/item-dom.json", "caption": "item dom", "findingIds": [] }, { "type": "layout", "path": "evidence/item-mobile-layout.json", "caption": "item mobile layout", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/item-mobile.png", "caption": "item mobile", "findingIds": [ "F04" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary", "findingIds": [ "F07", "F08", "F09", "F12" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [ "F08", "F10", "F11" ] }, { "type": "screenshot", "path": "evidence/news-desktop.png", "caption": "news desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/news-dom.json", "caption": "news dom", "findingIds": [] }, { "type": "layout", "path": "evidence/news-mobile-layout.json", "caption": "news mobile layout", "findingIds": [] }, { "type": "dom", "path": "evidence/platform-a11y.json", "caption": "platform a11y", "findingIds": [ "F02", "F03", "F05", "F06", "F07" ] }, { "type": "dom", "path": "evidence/recon.json", "caption": "recon", "findingIds": [ "F13", "F17" ] }, { "type": "dom", "path": "evidence/reduced-motion.json", "caption": "reduced motion", "findingIds": [] }, { "type": "dom", "path": "evidence/robots.json", "caption": "robots", "findingIds": [ "F12" ] }, { "type": "screenshot", "path": "evidence/search-desktop.png", "caption": "search desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/search-dom.json", "caption": "search dom", "findingIds": [] }, { "type": "layout", "path": "evidence/search-mobile-layout.json", "caption": "search mobile layout", "findingIds": [] }, { "type": "dom", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "screenshot", "path": "evidence/sise-desktop.png", "caption": "sise desktop", "findingIds": [] }, { "type": "dom", "path": "evidence/sise-dom.json", "caption": "sise dom", "findingIds": [] }, { "type": "layout", "path": "evidence/sise-mobile-layout.json", "caption": "sise mobile layout", "findingIds": [] }, { "type": "dom", "path": "evidence/sitemap.json", "caption": "sitemap", "findingIds": [] }, { "type": "dom", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F16" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The prefers-color-scheme: dark screenshot remains a white light theme, and the DOM reports color-scheme: normal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Reduced-motion probe", "evidence": "The page reports zero running animations and zero CSS-animated elements under prefers-reduced-motion: reduce.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Forced-colours visual review", "evidence": "The forced-colors/high-contrast screenshot preserves visible navigation, content text, focusable controls, and market values.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The platform probe found zero view-transition CSS rules; KRX/NXT state changes are immediate.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-a11y.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "No scroll-linked animation exists on the representative templates, so there is no scroll implementation to assess.", "reason": "No scroll-linked animation exists on the representative templates, so there is no scroll implementation to assess." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The audited read-only market, detail, news, and search templates expose no swipe, pull, carousel, or other physical gesture surface.", "reason": "The audited read-only market, detail, news, and search templates expose no swipe, pull, carousel, or other physical gesture surface." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The site has no sticky or affixed scroll chrome; its static document navigation does not create a scroll-state interaction to assess.", "reason": "The site has no sticky or affixed scroll chrome; its static document navigation does not create a scroll-state interaction to assess." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Rendered CSS in the DOM artifact positions GNB layers absolutely with fixed widths; the probe found zero popover, dialog, or details primitives.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/platform-a11y.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Screenshot and focus probe", "evidence": "Selected top navigation and KRX/NXT tabs use visible current-state styling, and keyboard focus uses the browser-visible outline.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/platform-a11y.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Load screenshots", "evidence": "No content-obscuring popup or interstitial appears on load across home, listing, detail, news, or search.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/item-desktop.png", "evidence/news-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Rendered CSS in the DOM artifact positions GNB layers absolutely with fixed widths; the probe found zero popover, dialog, or details primitives.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/platform-a11y.json" ], "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Desktop visual review", "evidence": "The first viewport prioritises market data and news; global chrome is compact and no decorative application frame crowds out core content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "All five 360x800 layout captures report no viewport meta and a 980 CSS-pixel layout viewport. Mobile screenshots show tiny three-column desktop content scaled to 36.7%.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/item-mobile.png", "evidence/item-mobile-layout.json" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The probe found zero @container rules, while screenshots show the same fixed multi-column composition at desktop and mobile.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-a11y.json", "evidence/home-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The probe measured 133 of 150 visible interactive elements below 24px in at least one dimension; the missing viewport meta causes mobile scaling rather than reflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-a11y.json", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Multi-path screenshot review", "evidence": "Navigation, market sections, stock detail heading, and labelled stock search make the finance purpose and next actions clear.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/item-desktop.png", "evidence/recon.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Search journey", "evidence": "The stock-search result URL renders a result page for 삼성전자 and links through to the representative stock detail.", "pathIds": [ "home" ], "artifacts": [ "evidence/search-desktop.png", "evidence/item-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "404 exercise", "evidence": "A deliberately invalid URL produced a clear Korean not-found explanation with previous-page and finance-home recovery links.", "pathIds": [ "home" ], "artifacts": [ "evidence/404.png", "evidence/404-dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Lighthouse measured FCP 5.2s, LCP 7.7s, TBT 460ms, Speed Index 10.7s, and Time to Interactive 18.5s (performance score 0.46). A separate trace measured LCP 2.65s and one 56.9ms long task.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout observers and trace", "evidence": "CLS remained 0.0004–0.052 across five templates; Lighthouse CLS was effectively zero.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/item-mobile-layout.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Lighthouse measured FCP 5.2s, LCP 7.7s, TBT 460ms, Speed Index 10.7s, and Time to Interactive 18.5s (performance score 0.46). A separate trace measured LCP 2.65s and one 56.9ms long task.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "HAR captured parser-inserted blocking styles and scripts among 75 requests. Lighthouse estimated 1,763KiB unused JavaScript and 104KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "HAR captured parser-inserted blocking styles and scripts among 75 requests. Lighthouse estimated 1,763KiB unused JavaScript and 104KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The platform probe found zero main, nav, header, or ARIA landmarks and three unlabelled form controls. Lighthouse failed landmark-one-main.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-a11y.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Lighthouse’s color-contrast audit failed across multiple nodes on the representative home page.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The platform probe found zero main, nav, header, or ARIA landmarks and three unlabelled form controls. Lighthouse failed landmark-one-main.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-a11y.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "All five 360x800 layout captures report no viewport meta and a 980 CSS-pixel layout viewport. Mobile screenshots show tiny three-column desktop content scaled to 36.7%. Lighthouse’s color-contrast audit failed across multiple nodes on the representative home page.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/item-mobile.png", "evidence/item-mobile-layout.json", "evidence/lighthouse.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F04", "F08" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The probe measured 133 of 150 visible interactive elements below 24px in at least one dimension; the missing viewport meta causes mobile scaling rather than reflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-a11y.json", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse runtime audit", "evidence": "Lighthouse errors-in-console passed with an empty error list.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Lighthouse found five chart images displayed at 50x30 despite a 120x60 intrinsic ratio. DOM evidence shows EUC-KR and fixed-width legacy CSS; Lighthouse also reports BFCache blocked by no-store responses.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-dom.json" ], "findingIds": [ "F11" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Lighthouse found five chart images displayed at 50x30 despite a 120x60 intrinsic ratio. DOM evidence shows EUC-KR and fixed-width legacy CSS; Lighthouse also reports BFCache blocked by no-store responses.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-dom.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The home page has title “Npay 증권” but no meta description. Recon found no canonical URL, and the raw home HTML did not preserve the rendered title/H1 signals.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/discover-home.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "robots.txt says User-agent: * Disallow: /, Lighthouse fails is-crawlable, and all audited templates omit viewport metadata.", "pathIds": [ "home" ], "artifacts": [ "evidence/robots.json", "evidence/lighthouse-summary.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "robots.txt says User-agent: * Disallow: /, Lighthouse fails is-crawlable, and all audited templates omit viewport metadata. The home page has title “Npay 증권” but no meta description. Recon found no canonical URL, and the raw home HTML did not preserve the rendered title/H1 signals.", "pathIds": [ "home" ], "artifacts": [ "evidence/robots.json", "evidence/lighthouse-summary.json", "evidence/home-mobile-layout.json", "evidence/recon.json", "evidence/discover-home.json" ], "findingIds": [ "F12", "F13" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The home page has title “Npay 증권” but no meta description. Recon found no canonical URL, and the raw home HTML did not preserve the rendered title/H1 signals.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/discover-home.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Headers evidence found no CSP or X-Content-Type-Options. Cookies evidence found JSESSIONID and NACT without Secure and all six cookies using SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "HAR attributes 68 of 75 requests and 601,101 of 664,756 transferred bytes to origins other than finance.naver.com; tracker recon lists eight third-party origins, though none matched the built-in known-tracker list.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The public browsing and search scope requested no browser permission and contains no authentication form; Naver’s external identity service was outside this host audit.", "reason": "The public browsing and search scope requested no browser permission and contains no authentication form; Naver’s external identity service was outside this host audit." }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The main response lacks clickjacking protection, Permissions-Policy, and CSP; Referrer-Policy is unsafe-url, which sends full URLs to destinations.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Discoverability comparison", "evidence": "Raw HTML contains 100% of measured home content tokens and 93% on stock detail; neither page is a JS shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discover-home.json", "evidence/discover-item.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Representative template and error-state exercise", "evidence": "Home, listing, detail, news, and search rendered without blank shells or console errors; the explicit invalid route rendered a recovery state.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/404.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "Live finance quotes are intrinsically online; no offline/installable intent was declared, so the PWA-specific check is not applicable.", "reason": "Live finance quotes are intrinsically online; no offline/installable intent was declared, so the PWA-specific check is not applicable." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Invalid-route exercise", "evidence": "The invalid route displays actionable recovery links instead of a blank screen or infinite spinner.", "pathIds": [ "home" ], "artifacts": [ "evidence/404.png", "evidence/404-dom.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The service is deliberately Korean-only and market-specific; no multilingual or bidirectional presentation is offered.", "reason": "The service is deliberately Korean-only and market-specific; no multilingual or bidirectional presentation is offered." }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The audited service is deliberately Korean-locale-only, and no locale-switching requirement or multi-locale flow is present.", "reason": "The audited service is deliberately Korean-locale-only, and no locale-switching requirement or multi-locale flow is present." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The audited Korean market views do not offer cross-time-zone scheduling or user-entered temporal data.", "reason": "The audited Korean market views do not offer cross-time-zone scheduling or user-entered temporal data." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Visual and DOM review", "evidence": "No consent wall, forced continuity, confirmshaming, disguised primary action, or coercive default appeared on the five public templates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/item-desktop.png", "evidence/search-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "The only public form is an optional free-text stock search with no invalid/required state to validate.", "reason": "The only public form is an optional free-text stock search with no invalid/required state to validate." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "Recon shows the labelled query input uses autocomplete=\"off\".", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "No checkout, subscription, consent, or account-management flow exists within the public finance host scope; the external Naver identity flow was not assessed.", "reason": "No checkout, subscription, consent, or account-management flow exists within the public finance host scope; the external Naver identity flow was not assessed." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "The images primitive found seven legacy PNG/GIF images, no modern formats, four missing responsive sources, and four below-fold images without lazy loading.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "HAR captured parser-inserted blocking styles and scripts among 75 requests. Lighthouse estimated 1,763KiB unused JavaScript and 104KiB unused CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct evidence review using the cited browser artifacts and mapped guidance.", "evidence": "HAR attributes 68 of 75 requests and 601,101 of 664,756 transferred bytes to origins other than finance.naver.com; tracker recon lists eight third-party origins, though none matched the built-in known-tracker list. The images primitive found seven legacy PNG/GIF images, no modern formats, four missing responsive sources, and four below-fold images without lazy loading.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-images.json" ], "findingIds": [ "F16", "F18" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "Agent-facing capabilities are emerging and no agent-control intent or transactional tool surface was declared for this read-only portal.", "reason": "Agent-facing capabilities are emerging and no agent-control intent or transactional tool surface was declared for this read-only portal." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon of all representative public templates.", "evidence": "No on-device generation or summarisation task is part of the current public experience, so built-in AI is not required.", "reason": "No on-device generation or summarisation task is part of the current public experience, so built-in AI is not required." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Heap before/after comparison", "evidence": "After ten alternating KRX/NXT tab interactions, heap self size rose only 87,810 bytes (0.56%), nodes 0.39%, with stable major constructor counts.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Heap summary review", "evidence": "Baseline heap was 15.6MB self size and 251,534 nodes, proportionate to the data-rich page.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Heap constructor comparison", "evidence": "No Detached constructor appears among the retained top constructors, and repeated tabs changed Object/Array counts by only one each.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05", "F06" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08", "F04", "F06" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F11" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F12" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F16", "F15" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "not-applicable", "reason": "The service is deliberately Korean-only and market-specific; no multilingual or bidirectional presentation is offered. The audited service is deliberately Korean-locale-only, and no locale-switching requirement or multi-locale flow is present. The audited Korean market views do not offer cross-time-zone scheduling or user-entered temporal data." }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F17" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F18", "F10", "F16" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "Agent-facing capabilities are emerging and no agent-control intent or transactional tool surface was declared for this read-only portal. No on-device generation or summarisation task is part of the current public experience, so built-in AI is not required." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage: primary market/news dashboard and global navigation archetype.", "url": "https://finance.naver.com/", "conditions": [ "1440x1000", "360x800", "prefers-color-scheme: dark", "forced-colors: active", "prefers-reduced-motion: reduce", "no JavaScript crawler view" ], "result": "issues" }, { "id": "market-listing", "description": "Domestic market listing/index template; represents dense tabular market discovery.", "url": "https://finance.naver.com/sise/", "conditions": [ "1440x1000", "360x800" ], "result": "issues" }, { "id": "stock-detail", "description": "Samsung Electronics stock detail; represents quote, chart, financial tables, and detail navigation.", "url": "https://finance.naver.com/item/main.naver?code=005930", "conditions": [ "1440x1000", "360x800", "no JavaScript crawler view" ], "result": "issues" }, { "id": "news-listing", "description": "Main news listing; represents content/index pages.", "url": "https://finance.naver.com/news/mainnews.naver", "conditions": [ "1440x1000", "360x800" ], "result": "issues" }, { "id": "search", "description": "Stock search for 삼성전자; representative public task flow from query to result/detail.", "url": "https://finance.naver.com/search/search.naver?query=%EC%82%BC%EC%84%B1%EC%A0%84%EC%9E%90", "conditions": [ "1440x1000", "360x800" ], "result": "issues" }, { "id": "error-state", "description": "Deliberately invalid route used to judge failure messaging and recovery.", "url": "https://finance.naver.com/does-not-exist-web-uplift", "conditions": [ "1440x1000" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "summary": "The interface ignores the user’s dark colour-scheme preference.", "evidence": "The prefers-color-scheme: dark screenshot remains a white light theme, and the DOM reports color-scheme: normal.", "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare color-scheme and provide dark surface, text, border, chart, and image treatments through prefers-color-scheme or light-dark().", "effort": "medium" }, { "id": "F02", "severity": "low", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "summary": "Tab and route state changes swap abruptly with no View Transition support.", "evidence": "The platform probe found zero view-transition CSS rules; KRX/NXT state changes are immediate.", "artifacts": [ "evidence/platform-a11y.json" ], "suggestedFix": "Use same-document View Transitions for tab/state changes and cross-document transitions for compatible navigation, with reduced-motion fallbacks.", "effort": "medium" }, { "id": "F03", "severity": "low", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "summary": "Global menus and transient layers use fixed absolute positioning rather than anchored semantic primitives.", "evidence": "Rendered CSS in the DOM artifact positions GNB layers absolutely with fixed widths; the probe found zero popover, dialog, or details primitives.", "artifacts": [ "evidence/home-dom.json", "evidence/platform-a11y.json" ], "suggestedFix": "Use popover/dialog semantics and CSS anchor positioning with position-try fallbacks for transient menus and help layers.", "effort": "large" }, { "id": "F04", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "summary": "Mobile receives a scaled-down desktop canvas instead of a responsive layout.", "evidence": "All five 360x800 layout captures report no viewport meta and a 980 CSS-pixel layout viewport. Mobile screenshots show tiny three-column desktop content scaled to 36.7%.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/item-mobile.png", "evidence/item-mobile-layout.json" ], "suggestedFix": "Add a standards-based viewport meta tag, replace fixed-width desktop wrappers with intrinsic fluid layouts, and reflow tables/charts into mobile-appropriate components.", "effort": "large" }, { "id": "F05", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "summary": "Components do not adapt to their available container.", "evidence": "The probe found zero @container rules, while screenshots show the same fixed multi-column composition at desktop and mobile.", "artifacts": [ "evidence/platform-a11y.json", "evidence/home-mobile.png" ], "suggestedFix": "Give reusable cards, market tables, and sidebars containment and use size-aware container queries to recompose them.", "effort": "large" }, { "id": "F06", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "summary": "The scaled desktop layout creates pervasive undersized touch targets and poor zoom/reflow.", "evidence": "The probe measured 133 of 150 visible interactive elements below 24px in at least one dimension; the missing viewport meta causes mobile scaling rather than reflow.", "artifacts": [ "evidence/platform-a11y.json", "evidence/home-mobile.png" ], "suggestedFix": "Reflow at narrow widths and provide at least 44x44 CSS-pixel touch areas around controls and links without disabling zoom.", "effort": "large" }, { "id": "F07", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "summary": "The document lacks semantic landmarks and has accessibility labelling gaps.", "evidence": "The platform probe found zero main, nav, header, or ARIA landmarks and three unlabelled form controls. Lighthouse failed landmark-one-main.", "artifacts": [ "evidence/platform-a11y.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Structure the shell with header/nav/main/footer landmarks, retain the logical heading hierarchy, and label every form control programmatically.", "effort": "medium" }, { "id": "F08", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "summary": "Some text and essential interface colours do not meet WCAG contrast minimums.", "evidence": "Lighthouse’s color-contrast audit failed across multiple nodes on the representative home page.", "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Raise muted text, tab, status, and control contrast to WCAG AA while preserving market-direction semantics with non-colour cues.", "effort": "medium" }, { "id": "F09", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "summary": "Cold-load performance is slow under Lighthouse mobile conditions.", "evidence": "Lighthouse measured FCP 5.2s, LCP 7.7s, TBT 460ms, Speed Index 10.7s, and Time to Interactive 18.5s (performance score 0.46). A separate trace measured LCP 2.65s and one 56.9ms long task.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "suggestedFix": "Prioritise the LCP path, defer non-critical scripts and ad/analytics work, and split long main-thread tasks by user-visible priority.", "effort": "large" }, { "id": "F10", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "summary": "Parser-blocking legacy resources and large unused bundles delay delivery.", "evidence": "HAR captured parser-inserted blocking styles and scripts among 75 requests. Lighthouse estimated 1,763KiB unused JavaScript and 104KiB unused CSS.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/lighthouse.json" ], "suggestedFix": "Defer or module-load non-critical scripts, remove unused/duplicate bundles, subset CSS per template, and keep critical dependencies short.", "effort": "large" }, { "id": "F11", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "summary": "Asset and document hygiene includes distorted chart images and an obsolete desktop document model.", "evidence": "Lighthouse found five chart images displayed at 50x30 despite a 120x60 intrinsic ratio. DOM evidence shows EUC-KR and fixed-width legacy CSS; Lighthouse also reports BFCache blocked by no-store responses.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-dom.json" ], "suggestedFix": "Preserve intrinsic image aspect ratios, migrate templates to modern UTF-8 semantic HTML, and review no-store usage so safe public pages can use BFCache.", "effort": "large" }, { "id": "F12", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "summary": "The public finance portal is blocked from general crawling and is not mobile-friendly.", "evidence": "robots.txt says User-agent: * Disallow: /, Lighthouse fails is-crawlable, and all audited templates omit viewport metadata.", "artifacts": [ "evidence/robots.json", "evidence/lighthouse-summary.json", "evidence/home-mobile-layout.json" ], "suggestedFix": "Publish an intentional crawler policy for public pages, align robots and sitemap coverage, and add a correct viewport meta tag.", "effort": "medium" }, { "id": "F13", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "summary": "Page metadata is incomplete and inconsistent across templates.", "evidence": "The home page has title “Npay 증권” but no meta description. Recon found no canonical URL, and the raw home HTML did not preserve the rendered title/H1 signals.", "artifacts": [ "evidence/recon.json", "evidence/discover-home.json" ], "suggestedFix": "Add unique descriptive titles and meta descriptions to each archetype, plus canonical URLs and consistent server-rendered heading/title signals.", "effort": "medium" }, { "id": "F14", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "summary": "HTTPS is present, but core security headers and cookie attributes are incomplete.", "evidence": "Headers evidence found no CSP or X-Content-Type-Options. Cookies evidence found JSESSIONID and NACT without Secure and all six cookies using SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Deploy a restrictive CSP, nosniff, secure SameSite cookie defaults, and audit whether cross-site cookie access is actually required.", "effort": "medium" }, { "id": "F15", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "summary": "Browser-enforced defensive policy coverage is weak.", "evidence": "The main response lacks clickjacking protection, Permissions-Policy, and CSP; Referrer-Policy is unsafe-url, which sends full URLs to destinations.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Set CSP frame-ancestors (or X-Frame-Options), a restrictive Referrer-Policy, and a least-privilege Permissions-Policy; add Trusted Types where XSS-sensitive DOM sinks remain.", "effort": "medium" }, { "id": "F16", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "summary": "The page has a broad multi-origin analytics, advertising, and asset footprint.", "evidence": "HAR attributes 68 of 75 requests and 601,101 of 664,756 transferred bytes to origins other than finance.naver.com; tracker recon lists eight third-party origins, though none matched the built-in known-tracker list.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Inventory each cross-origin dependency, remove non-essential telemetry/ads, batch analytics, defer low-value work, and document data purpose and retention.", "effort": "large" }, { "id": "F17", "severity": "low", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "forms", "summary": "The primary stock search explicitly disables browser autocomplete.", "evidence": "Recon shows the labelled query input uses autocomplete=\"off\".", "artifacts": [ "evidence/recon.json" ], "suggestedFix": "Use a suitable autocomplete token or allow browser history where appropriate; keep site suggestions as an enhancement rather than disabling input assistance.", "effort": "small" }, { "id": "F18", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://finance.naver.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "summary": "Image delivery relies on legacy formats and eager below-fold assets.", "evidence": "The images primitive found seven legacy PNG/GIF images, no modern formats, four missing responsive sources, and four below-fold images without lazy loading.", "artifacts": [ "evidence/home-images.json" ], "suggestedFix": "Serve responsive AVIF/WebP where suitable, lazy-load below-fold charts/assets, and retain intrinsic dimensions and useful fallbacks.", "effort": "medium" } ], "taskList": [ { "id": "T01", "title": "Rebuild the public templates as responsive, accessible layouts", "priority": 1, "findingIds": [ "F04", "F05", "F06", "F07", "F08" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Cut the critical rendering path and unused JavaScript/CSS", "priority": 2, "findingIds": [ "F09", "F10" ], "guidanceId": "performance", "status": "open" }, { "id": "T03", "title": "Harden response headers, cookies, and cross-origin data collection", "priority": 3, "findingIds": [ "F14", "F15", "F16" ], "guidanceId": "security", "status": "open" }, { "id": "T04", "title": "Repair crawler, canonical, description, and structured metadata", "priority": 4, "findingIds": [ "F12", "F13" ], "guidanceId": "html", "status": "open" }, { "id": "T05", "title": "Modernise document, image, and BFCache hygiene", "priority": 5, "findingIds": [ "F11", "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T06", "title": "Add preference-aware theming", "priority": 6, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T07", "title": "Replace fixed custom layers with semantic anchored primitives", "priority": 7, "findingIds": [ "F02", "F03" ], "guidanceId": "position-aware-tooltips", "status": "open" }, { "id": "T08", "title": "Allow appropriate browser input assistance", "priority": 8, "findingIds": [ "F17" ], "guidanceId": "forms", "status": "open" } ], "budget": { "wallClockSeconds": 900, "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T12-27-47-328Z" }