{ "url": "https://www.eporner.com", "auditedAt": "2026-07-25T22:16:35.992Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of the public age gate and representative public legal/support templates. Porn listing, playback, biometric submission, and authenticated account completion were excluded.", "page": { "appType": "mpa", "framework": "Server-rendered HTML with jQuery", "notes": "The root URL is a jurisdictional age-verification gate. Public legal/support pages remain reachable. The account/verification overlay was opened but no image, biometric, credential, or account data was submitted." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "lighthouse", "robots/sitemap fetch" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "dom", "path": "evidence/404-dom.json", "caption": "404 dom", "findingIds": [ "F18" ] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 mobile", "findingIds": [ "F09" ] }, { "type": "other", "path": "evidence/age-modal-close-probe.json", "caption": "age modal close probe" }, { "type": "other", "path": "evidence/age-modal-dismiss-probe.json", "caption": "age modal dismiss probe", "findingIds": [ "F05", "F09", "F14" ] }, { "type": "other", "path": "evidence/age-modal-elements.json", "caption": "age modal elements", "findingIds": [ "F03", "F05", "F08", "F23", "F24" ] }, { "type": "screenshot", "path": "evidence/age-modal-mobile.png", "caption": "age modal mobile" }, { "type": "screenshot", "path": "evidence/age-modal-open-mobile.png", "caption": "age modal open mobile" }, { "type": "other", "path": "evidence/age-modal-probe.json", "caption": "age modal probe", "findingIds": [ "F08", "F20", "F24" ] }, { "type": "screenshot", "path": "evidence/contact-desktop.png", "caption": "contact desktop", "findingIds": [ "F15" ] }, { "type": "screenshot", "path": "evidence/contact-discoverability-crawler.png", "caption": "contact discoverability crawler" }, { "type": "screenshot", "path": "evidence/contact-discoverability-rendered.png", "caption": "contact discoverability rendered" }, { "type": "discoverability", "path": "evidence/contact-discoverability.json", "caption": "contact discoverability" }, { "type": "dom", "path": "evidence/contact-dom.json", "caption": "contact dom" }, { "type": "other", "path": "evidence/contact-images.json", "caption": "contact images", "findingIds": [ "F16", "F25", "F26" ] }, { "type": "layout", "path": "evidence/contact-layout-mobile.json", "caption": "contact layout mobile" }, { "type": "lighthouse", "path": "evidence/contact-lighthouse-summary.json", "caption": "contact lighthouse summary", "findingIds": [ "F07", "F12" ] }, { "type": "lighthouse", "path": "evidence/contact-lighthouse.json", "caption": "contact lighthouse" }, { "type": "other", "path": "evidence/contact-probe.json", "caption": "contact probe", "findingIds": [ "F06", "F22" ] }, { "type": "other", "path": "evidence/contact-resource-consent-probe.json", "caption": "contact resource consent probe", "findingIds": [ "F11", "F20", "F23" ] }, { "type": "har-summary", "path": "evidence/contact-summary.json", "caption": "contact summary", "findingIds": [ "F26" ] }, { "type": "har", "path": "evidence/contact.har", "caption": "contact" }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "home cookies", "findingIds": [ "F19" ] }, { "type": "screenshot", "path": "evidence/home-dark-reduced.png", "caption": "home dark reduced", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop" }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler" }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "home discoverability rendered" }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability", "findingIds": [ "F21" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F02", "F21" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "home headers", "findingIds": [ "F19" ] }, { "type": "heap", "path": "evidence/home-heap-baseline.json", "caption": "home heap baseline" }, { "type": "heap", "path": "evidence/home-heap-modal-baseline.json", "caption": "home heap modal baseline" }, { "type": "heap", "path": "evidence/home-heap-modal-post-switches.json", "caption": "home heap modal post switches" }, { "type": "heap", "path": "evidence/home-heap-post-interaction.json", "caption": "home heap post interaction" }, { "type": "heap", "path": "evidence/home-heap-post.json", "caption": "home heap post" }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images", "findingIds": [ "F16" ] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "home layout mobile" }, { "type": "lighthouse", "path": "evidence/home-lighthouse-summary.json", "caption": "home lighthouse summary", "findingIds": [ "F07", "F10", "F12", "F13", "F14", "F17" ] }, { "type": "lighthouse", "path": "evidence/home-lighthouse.json", "caption": "home lighthouse" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F23" ] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe", "findingIds": [ "F01", "F03", "F06", "F17", "F18", "F22" ] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "home secrets" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F11", "F25" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F10" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace" }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "home trackers" }, { "type": "har", "path": "evidence/home.har", "caption": "home" }, { "type": "dom", "path": "evidence/privacy-dom.json", "caption": "privacy dom" }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "robots headers" }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots" }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "sitemap headers" }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap" }, { "type": "dom", "path": "evidence/terms-dom.json", "caption": "terms dom" }, { "type": "screenshot", "path": "evidence/terms-high-contrast.png", "caption": "terms high contrast" }, { "type": "layout", "path": "evidence/terms-layout-mobile.json", "caption": "terms layout mobile", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/terms-mobile.png", "caption": "terms mobile", "findingIds": [ "F04", "F15" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Emulated dark-mode screenshot plus computed CSS inspection", "evidence": "The UI remains the same hard-coded black theme and the CSS probe found no color-scheme, prefers-color-scheme, or light-dark() support; the only theme switch is a cookie.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-dark-reduced.png", "evidence/home-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Reduced-motion emulation plus animation/CSS probe", "evidence": "The age gate contains an indefinitely repeating SVG ; the only prefers-reduced-motion rule found targets an unrelated view counter, so the age animation continues under reduce.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-dark-reduced.png", "evidence/home-dom.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Forced-colors and prefers-contrast screenshot", "evidence": "The terms page remains readable and controls remain visible under forced-colors: active and prefers-contrast: more. ", "pathIds": [ "terms" ], "artifacts": [ "evidence/terms-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "medium", "method": "DOM/CSS inspection and age-modal state change", "evidence": "No view-transition CSS or API use was found; the primary gate-to-account state swaps abruptly into a custom overlay.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-probe.json", "evidence/age-modal-elements.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "CSS and DOM inspection", "evidence": "No scroll-linked animation or parallax was present on the representative templates, so no main-thread scroll animation anti-pattern was observed.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-probe.json", "evidence/contact-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "DOM/CSS interaction inspection", "evidence": "No custom pointermove, swipe, pull, carousel, or other gesture-driven interaction was present on the audited paths; native scrolling remained in control.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-dom.json", "evidence/contact-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "Long-page mobile screenshot and CSS inspection", "evidence": "The 10,158px terms page provides no scroll progress or scroll-state-aware header behavior; CSS inspection found no scroll-state/container mechanism.", "pathIds": [ "terms" ], "artifacts": [ "evidence/terms-mobile.png", "evidence/terms-layout-mobile.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "The audited templates expose no tooltip, anchored popover, or edge-positioned menu for which CSS anchor positioning is applicable.", "reason": "The audited templates expose no tooltip, anchored popover, or edge-positioned menu for which CSS anchor positioning is applicable." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Heading hierarchy and modal focus probe", "evidence": "Legal pages use a prominent page heading and section headings, and opening the account overlay moves focus into its login input, giving a visible destination after navigation.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/contact-probe.json", "evidence/age-modal-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "medium", "method": "Load screenshots across templates", "evidence": "The age gate is a legally required access boundary rather than an advertising interstitial; legal content is not obscured on load apart from a shallow dismissible cookie strip.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-mobile.png", "evidence/terms-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "DOM primitive and active dismissal probe", "evidence": "The account flow uses #EPmodal-overlay custom divs, has no or role=dialog, exposes no close/cancel control, and remains open after Escape.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-dismiss-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Desktop and mobile screenshot review", "evidence": "The age gate and legal pages devote most of the viewport to the primary content; navigation chrome is compact rather than dominating the page.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-desktop.png", "evidence/contact-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Layout primitive at 360x800 on three templates", "evidence": "Home, terms, and contact each reported scrollWidth 360, clientWidth 360, horizontalOverflowPx 0, with a valid viewport meta tag.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/terms-layout-mobile.json", "evidence/contact-layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "CSS probe across reused navigation/content templates", "evidence": "The CSS probe found no @container or container-type use; reused header and content components depend only on viewport media queries.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-probe.json", "evidence/contact-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Lighthouse target-size audit and focus/geometry probe", "evidence": "Mobile footer links are only 14px high and several header controls are 30x30px; Lighthouse failed target-size while keyboard focus itself remained visible.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/contact-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport screenshots and heading review", "evidence": "The entry page clearly explains the age requirement and gives one prominent verification action; legal/support pages use descriptive H1 headings.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-mobile.png", "evidence/contact-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Primary age-verification walkthrough and post-click DOM inspection", "evidence": "The verification CTA first opens a registration/sign-in wall with multiple identity providers before the advertised selfie verification step, adding an avoidable account detour to the core flow.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Modal Escape/close probe and missing-route request", "evidence": "The account overlay cannot be cancelled with Escape and has no close control; an arbitrary missing URL also returns HTTP 200 with the age gate instead of an actionable not-found state.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-dismiss-probe.json", "evidence/404-dom.json", "evidence/404-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse plus DevTools trace", "evidence": "Home Lighthouse measured LCP 2.95s, outside the good <=2.5s range; contact measured 2.38s and the trace measured 1.87s, so the regression is concentrated on the entry gate.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout observers and Lighthouse", "evidence": "All three mobile layout captures and both Lighthouse runs reported CLS 0 with no observed layout shifts.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/terms-layout-mobile.json", "evidence/contact-layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace, layout observers, and Lighthouse TBT", "evidence": "The trace and layout observers found no long tasks, and Lighthouse reported total blocking time 0ms on home and contact.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-lighthouse-summary.json", "evidence/contact-lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "HAR summary confirmed against live script attributes", "evidence": "Home loads parser-blocking jQuery 3.4.1 and ajax3.js without async/defer; Lighthouse attributes 2.16s of home LCP to render delay.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-summary.json", "evidence/contact-resource-consent-probe.json", "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "pass", "confidence": "medium", "method": "HAR and Lighthouse inspection", "evidence": "Audited pages transfer 74-93KB of JavaScript and Lighthouse did not report a large unused/duplicate-code opportunity; no third-party script dominates total weight.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-summary.json", "evidence/contact-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits and DOM probe", "evidence": "Home logo lacks alt text, contact mobile header links lack accessible names, and the custom account overlay lacks dialog semantics.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/contact-lighthouse-summary.json", "evidence/age-modal-elements.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse computed contrast audit", "evidence": "The green age-estimation message is #0a910a on #222 at 3.83:1, below the required 4.5:1 for its text size.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Lighthouse structure audits and dismissal/focus probes", "evidence": "The entry page has no main landmark or H1, its UL directly contains a BR, and the custom modal has no dialog role or keyboard dismissal even though initial button focus is visible.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-probe.json", "evidence/age-modal-dismiss-probe.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Mobile/desktop screenshot review", "evidence": "Legal and support copy is rendered around 12.5px with dense justified paragraphs; the fixed cookie strip overlaps the last visible lines on mobile.", "pathIds": [ "terms" ], "artifacts": [ "evidence/terms-mobile.png", "evidence/contact-desktop.png" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse target-size audit and narrow layout screenshots", "evidence": "Reflow succeeds and scaling is not disabled, but numerous footer/content links are only 14px high and mobile header controls are 30x30px, below accessible target guidance.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/contact-lighthouse-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Lighthouse best-practices run on home and contact", "evidence": "Both Lighthouse runs scored Best Practices 1.00 and reported no console-error or uncaught-exception failure.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/contact-lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "DOM, Lighthouse, and image inventory", "evidence": "Although doctype and UTF-8 are valid, all 2 home images and all 23 contact images omit intrinsic width/height; the entry UL also contains an invalid BR child.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-images.json", "evidence/contact-images.json", "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "medium", "method": "Lighthouse Best Practices and DOM behavior review", "evidence": "No deprecated-API, paste-prevention, notification/geolocation-on-load, or BFCache issue was surfaced on the representative pages.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/contact-lighthouse.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Rendered/raw metadata inspection and Lighthouse SEO", "evidence": "The public entry page has a descriptive title but no meta description; Lighthouse failed the meta-description audit.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-lighthouse-summary.json", "evidence/home-discoverability.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "DOM, robots.txt, and Lighthouse SEO", "evidence": "Representative links use real href values, viewport meta is present, robots.txt allows the public site and declares a sitemap, and contact Lighthouse SEO scored 1.00.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/robots.txt", "evidence/contact-lighthouse.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Canonical/robots/sitemap probe and direct missing-route status request", "evidence": "The homepage has no canonical URL, and an arbitrary nonexistent URL returns HTTP 200 with the age gate, creating a soft-404/indexing ambiguity despite a valid sitemap.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-probe.json", "evidence/sitemap.xml", "evidence/404-dom.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "medium", "method": "Metadata probe across page types", "evidence": "The contact entity exposes six Open Graph tags and eleven hreflang links; the generic age gate has no rich entity requiring JSON-LD.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/contact-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers and cookie primitives", "evidence": "HTTPS and HSTS are present, but CSP only says upgrade-insecure-requests, X-Content-Type-Options and Referrer-Policy are absent, and epcolor is neither Secure nor SameSite-protected.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "HAR, tracker and consent DOM probes", "evidence": "Self-hosted Piwik analytics loads before choice while the only cookie notice action is [X] and continued use is treated as consent; the modal also loads Google identity iframes.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/contact-resource-consent-probe.json", "evidence/contact-summary.json", "evidence/home-trackers.json", "evidence/age-modal-probe.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "medium", "method": "Age-flow DOM and auth-provider inspection", "evidence": "Camera access is behind explicit verification and Start camera actions, not requested on load; authentication offers several federated providers in addition to password login.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-elements.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Security-header primitive", "evidence": "HSTS and SAMEORIGIN framing protection are present, but the CSP has no source restrictions or frame-ancestors, and Referrer-Policy/nosniff are missing.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-headers.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Raw/no-JS discoverability comparison plus authored DOM behavior", "evidence": "Core text is server-rendered, but the only age-verification action is an onclick button with no form or href fallback, so the primary flow cannot proceed without JavaScript.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-dom.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Active overlay dismissal probe", "evidence": "The custom account overlay remains after Escape and offers no close/cancel control, so runtime state can trap users rather than recovering predictably.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-dismiss-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "The audited product is an intrinsically network-dependent streaming service, not an installable/offline app; no offline product intent was declared.", "reason": "The audited product is an intrinsically network-dependent streaming service, not an installable/offline app; no offline product intent was declared." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct request and DOM/screenshot of a random missing route", "evidence": "A nonexistent route returns HTTP 200 and the normal age gate, with no not-found explanation, back link, search, or recovery state.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/404-dom.json", "evidence/404-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "DOM/CSS probe across entry and localized template", "evidence": "Legal pages declare lang=en and expose hreflang, but the entry page has no lang or dir and CSS contains no logical-property strategy.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-probe.json", "evidence/contact-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "The representative gate, legal and support pages display no dates, currencies, localized numbers, durations, or calendars requiring locale-aware formatting.", "reason": "The representative gate, legal and support pages display no dates, currencies, localized numbers, durations, or calendars requiring locale-aware formatting." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "The representative paths contain no events, schedules, stored times, or recurring time concepts for which time-zone/DST handling applies.", "reason": "The representative paths contain no events, schedules, stored times, or recurring time concepts for which time-zone/DST handling applies." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Age-gate and cookie-consent walkthrough", "evidence": "The gate promises a simple AI verification but first opens registration/sign-in and only later reveals live-selfie/AgeGo options; the cookie notice equates continued use with consent and offers no reject/settings choice.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-mobile.png", "evidence/age-modal-elements.json", "evidence/contact-resource-consent-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "medium", "method": "Age-verification error-state DOM inspection", "evidence": "The camera flow contains role=status, role=alert, aria-live messaging, Retry and Stop camera controls, plus a detailed camera-access help disclosure.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-elements.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Modal form DOM inspection", "evidence": "Login and password fields omit appropriate autocomplete tokens, and the focused login input is explicitly autocomplete=off, obstructing password-manager/autofill assistance.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Account-flow walkthrough and dismissal probe", "evidence": "Account registration is inserted before verification and the resulting overlay has no close control or Escape dismissal, making the commitment neither clear nor easily reversible.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-dismiss-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "medium", "method": "Image inventory and HAR weight analysis", "evidence": "The entry spends 169KB on a JPEG background, retains a legacy GIF badge, and contact loads legacy JPEG thumbnails; image elements lack intrinsic dimensions and responsive source selection.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-images.json", "evidence/contact-images.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR plus rendered geometry/image inventory", "evidence": "The contact page fetches multiple adult gallery thumbnails that render at 0x0 on the support template, while analytics also starts before a user choice.", "pathIds": [ "contact-support" ], "artifacts": [ "evidence/contact-summary.json", "evidence/contact-images.json", "evidence/contact-resource-consent-probe.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "pass", "confidence": "medium", "method": "HAR and tracker inspection", "evidence": "The audited static paths transfer 202-284KB, autoplay no media, and contact uses a self-hosted analytics endpoint; overall media/script weight is modest for the product.", "pathIds": [ "home-age-gate", "terms", "privacy", "contact-support" ], "artifacts": [ "evidence/home-summary.json", "evidence/contact-summary.json", "evidence/home-trackers.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "No developer intent or user journey indicates that this age-gated media site should expose transactional WebMCP capabilities; its public static content is already server-rendered and it exposes a conventional webmaster API.", "reason": "No developer intent or user journey indicates that this age-gated media site should expose transactional WebMCP capabilities; its public static content is already server-rendered and it exposes a conventional webmaster API." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "No summarisation, writing, classification, or other user task on the audited gate/legal/support paths would clearly benefit from built-in on-device inference.", "reason": "No summarisation, writing, classification, or other user task on the audited gate/legal/support paths would clearly benefit from built-in on-device inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Memory-tracer baseline then 20 modal mode switches", "evidence": "After loading the modal, 20 create/login switches increased heap from 33,591,228 to 33,786,970 bytes (0.6%) and nodes from 141,778 to 143,902 (1.5%), modest bounded growth rather than an unbounded pattern.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-heap-modal-baseline.json", "evidence/home-heap-modal-post-switches.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Heap summary proportionality review", "evidence": "The loaded gate uses 4.33MB before the account/identity UI and about 33.6MB after that UI loads; the footprint is material but proportionate to the federated-login and camera-capable flow.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-heap-baseline.json", "evidence/home-heap-modal-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Before/after heap constructor comparison", "evidence": "Neither compared heap summary reports Detached* constructors, and Object/Array populations remain nearly flat across 20 modal mode switches; no unbounded retained-listener/timer signature was observed.", "pathIds": [ "home-age-gate" ], "artifacts": [ "evidence/home-heap-modal-baseline.json", "evidence/home-heap-modal-post-switches.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14", "F15", "F07" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F21", "F05", "F09" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F22" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F23", "F24" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F25", "F26" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No developer intent or user journey indicates that this age-gated media site should expose transactional WebMCP capabilities; its public static content is already server-rendered and it exposes a conventional webmaster API. No summarisation, writing, classification, or other user task on the audited gate/legal/support paths would clearly benefit from built-in on-device inference." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home-age-gate", "description": "Public entry, legal age gate and account/verification overlay; primary high-risk journey.", "url": "https://www.eporner.com/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "keyboard dismissal", "repeated modal mode switching" ], "result": "issues" }, { "id": "terms", "description": "Long-form legal/content template representing terms and similar static policy pages.", "url": "https://www.eporner.com/terms/", "conditions": [ "mobile 360x800", "forced-colors: active", "prefers-contrast: more" ], "result": "issues" }, { "id": "privacy", "description": "Privacy and 2257 disclosure template, reviewed for data-handling and indexing context.", "url": "https://www.eporner.com/privacy-2257/", "conditions": [ "desktop DOM" ], "result": "issues" }, { "id": "contact-support", "description": "Support, DMCA and takedown route representing the information-heavy two-column template.", "url": "https://www.eporner.com/contact/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "no-JS crawler comparison" ], "result": "issues" }, { "id": "missing-route", "description": "Random nonexistent route used to inspect HTTP/error recovery behavior.", "url": "https://www.eporner.com/__web_uplift_missing_404__", "conditions": [ "mobile 360x800", "direct HTTP status" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "summary": "Hard-coded theme ignores the system color preference", "evidence": "Dark-mode emulation and CSS inspection show no preference-driven theme mechanism.", "suggestedFix": "Declare color-scheme and derive surfaces/text from prefers-color-scheme or light-dark().", "effort": "small", "artifacts": [ "evidence/home-dark-reduced.png", "evidence/home-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F02", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "summary": "Indefinite age-gate animation continues under reduced motion", "evidence": "The SVG animate element repeats forever and is not covered by the existing reduced-motion rule.", "suggestedFix": "Disable or replace the SMIL animation inside prefers-reduced-motion: reduce.", "effort": "trivial", "artifacts": [ "evidence/home-dom.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "summary": "Primary state changes are abrupt", "evidence": "No View Transition API or CSS was found for the gate-to-account state change.", "suggestedFix": "Use a same-document view transition for the gate-to-account state swap, while respecting reduced motion.", "effort": "small", "artifacts": [ "evidence/home-probe.json", "evidence/age-modal-elements.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "summary": "Long legal pages offer no scroll-state guidance", "evidence": "The terms page is 10,158px tall with no progress indicator or scroll-state-aware chrome.", "suggestedFix": "Add a lightweight declarative scroll-progress indicator to long legal documents.", "effort": "small", "artifacts": [ "evidence/terms-mobile.png", "evidence/terms-layout-mobile.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F05", "severity": "high", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "light-dismiss-a-dialog", "summary": "Custom account overlay traps the user", "evidence": "The overlay is a custom div, lacks dialog semantics and close/cancel controls, and remains after Escape.", "suggestedFix": "Use with an accessible name, explicit Cancel button, Escape handling, focus containment, and focus return.", "effort": "medium", "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-dismiss-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F06", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "summary": "Components only adapt at viewport breakpoints", "evidence": "CSS probes found no container queries on reused navigation/content components.", "suggestedFix": "Introduce container-type and component-scoped @container rules where the same components appear in different slots.", "effort": "medium", "artifacts": [ "evidence/home-probe.json", "evidence/contact-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F07", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "summary": "Many touch targets are too small", "evidence": "Lighthouse fails target-size; mobile footer links are 14px high and header icons are 30x30px.", "suggestedFix": "Increase interactive target boxes and spacing to at least 24x24 CSS px, preferably 44x44 for primary mobile controls.", "effort": "small", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/contact-lighthouse-summary.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F08", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "summary": "Verification CTA inserts an account wall", "evidence": "The verification action opens registration/sign-in before exposing the advertised selfie verification step.", "suggestedFix": "Let users complete legally required age verification directly, then offer account creation as an optional later step.", "effort": "large", "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F09", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "persistent-toast-notifications", "summary": "Recovery states are missing or misleading", "evidence": "The modal cannot be cancelled and a nonexistent URL returns HTTP 200 with the normal gate.", "suggestedFix": "Provide modal cancel/return controls and serve a real 404 page with navigation, search and support links.", "effort": "medium", "artifacts": [ "evidence/age-modal-dismiss-probe.json", "evidence/404-mobile.png" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F10", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "summary": "Entry-page LCP misses the good threshold", "evidence": "Lighthouse measured 2.95s LCP on home versus the 2.5s good threshold.", "suggestedFix": "Prioritise the LCP content, reduce render delay, and remeasure under mobile throttling.", "effort": "medium", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F11", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "summary": "Legacy scripts block parsing on the entry gate", "evidence": "jQuery and ajax3.js are parser-inserted in head without async/defer; Lighthouse reports 2.16s LCP render delay.", "suggestedFix": "Defer non-critical scripts, split the minimal gate code, and remove jQuery from the critical path where feasible.", "effort": "medium", "artifacts": [ "evidence/home-summary.json", "evidence/contact-resource-consent-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "summary": "Images and controls lack accessible names", "evidence": "Lighthouse finds the home logo without alt and several mobile contact header links without discernible names.", "suggestedFix": "Add meaningful alt/aria-label text and expose the modal as a named dialog.", "effort": "small", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/contact-lighthouse-summary.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F13", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "summary": "Age-estimation status text fails contrast", "evidence": "Lighthouse computes 3.83:1 for #0a910a on #222, below 4.5:1.", "suggestedFix": "Use a lighter green or darker background that reaches WCAG AA while preserving status meaning beyond color.", "effort": "trivial", "artifacts": [ "evidence/home-lighthouse-summary.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F14", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "summary": "Entry semantics and modal focus behavior are incomplete", "evidence": "The page lacks main/H1, has malformed list content, and the overlay lacks dialog semantics and Escape dismissal.", "suggestedFix": "Add main and H1 landmarks, valid list markup, and native dialog focus/dismiss behavior.", "effort": "medium", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/age-modal-dismiss-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F15", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "summary": "Legal/support text is cramped", "evidence": "Screenshots show roughly 12.5px dense justified copy, with the cookie strip overlapping mobile content.", "suggestedFix": "Increase body size/line-height, use readable measure and left alignment, and reserve space for or remove the fixed cookie strip.", "effort": "small", "artifacts": [ "evidence/terms-mobile.png", "evidence/contact-desktop.png" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F16", "severity": "low", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "summary": "Image sizing and list markup are unsound", "evidence": "All audited image elements omit intrinsic width/height and the gate list includes a BR child.", "suggestedFix": "Add width/height or aspect-ratio to images and keep only LI children inside UL.", "effort": "small", "artifacts": [ "evidence/home-images.json", "evidence/contact-images.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F17", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "summary": "Homepage has no meta description", "evidence": "DOM and Lighthouse confirm a title but no meta description on the public entry URL.", "suggestedFix": "Add a concise, accurate age-gate meta description.", "effort": "trivial", "artifacts": [ "evidence/home-probe.json", "evidence/home-lighthouse-summary.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "summary": "Canonical and 404 indexing signals are ambiguous", "evidence": "Home has no canonical and random missing URLs return 200 with identical gate content.", "suggestedFix": "Add a self-canonical and return HTTP 404 plus noindex for missing routes.", "effort": "small", "artifacts": [ "evidence/home-probe.json", "evidence/404-dom.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F19", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "summary": "Browser defenses and cookie flags are incomplete", "evidence": "CSP only upgrades insecure requests; nosniff and Referrer-Policy are missing; epcolor is not Secure and uses SameSite=None.", "suggestedFix": "Deploy a restrictive nonce/hash CSP, nosniff, strict Referrer-Policy, a scoped Permissions-Policy, and Secure/Lax cookie flags.", "effort": "medium", "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F20", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "summary": "Analytics runs before meaningful consent", "evidence": "Piwik loads while the notice offers only [X] and treats continued use as agreement; identity iframes load after opening the flow.", "suggestedFix": "Do not start optional analytics before an explicit choice; offer reject/settings and document identity-provider data transfers in context.", "effort": "medium", "artifacts": [ "evidence/contact-resource-consent-probe.json", "evidence/age-modal-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F21", "severity": "high", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "html", "summary": "Core age verification has no no-JS path", "evidence": "The CTA is an onclick-only button, so the primary gate cannot advance without JavaScript despite fully server-rendered copy.", "suggestedFix": "Use a real form/action or link fallback that reaches a server-rendered verification path, then enhance it with JS.", "effort": "medium", "artifacts": [ "evidence/home-dom.json", "evidence/home-discoverability.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F22", "severity": "medium", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "summary": "Entry language and bidirectional foundations are missing", "evidence": "The entry HTML lacks lang/dir and audited CSS uses no logical properties, despite localized legal templates.", "suggestedFix": "Set the correct lang and dir on every response and migrate directional layout to logical properties.", "effort": "small", "artifacts": [ "evidence/home-probe.json", "evidence/contact-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F23", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "privacy", "summary": "Verification and consent disclosures are not transparent", "evidence": "The gate does not disclose the account detour or biometric/third-party choices, and the cookie strip lacks reject/settings.", "suggestedFix": "Disclose verification steps and processors before the CTA, separate required verification from optional account creation, and use explicit granular consent.", "effort": "medium", "artifacts": [ "evidence/home-mobile.png", "evidence/age-modal-elements.json", "evidence/contact-resource-consent-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F24", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "summary": "Sign-in fields block autofill assistance", "evidence": "The login input is autocomplete=off and password/login controls lack correct autocomplete tokens.", "suggestedFix": "Use autocomplete=username and autocomplete=current-password, preserving password-manager and passkey affordances.", "effort": "trivial", "artifacts": [ "evidence/age-modal-elements.json", "evidence/age-modal-probe.json" ], "pathId": "home-age-gate", "url": "https://www.eporner.com/" }, { "id": "F25", "severity": "low", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "summary": "Decorative and thumbnail assets use avoidable legacy delivery", "evidence": "The gate uses a 169KB JPEG background and GIF badge; contact uses legacy JPEG thumbnails and no intrinsic dimensions.", "suggestedFix": "Encode raster assets as AVIF/WebP where beneficial and supply intrinsic dimensions/responsive sources.", "effort": "small", "artifacts": [ "evidence/home-summary.json", "evidence/contact-images.json" ], "pathId": "contact-support", "url": "https://www.eporner.com/contact/" }, { "id": "F26", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "summary": "Support page fetches invisible media", "evidence": "The contact template downloads gallery thumbnails whose rendered size is 0x0, plus analytics before consent.", "suggestedFix": "Do not request gallery media on support/legal templates; conditionally load optional analytics only after consent.", "effort": "small", "artifacts": [ "evidence/contact-summary.json", "evidence/contact-images.json" ], "pathId": "contact-support", "url": "https://www.eporner.com/contact/" } ], "taskList": [ { "id": "T01", "title": "Replace the custom trapped account overlay with a dismissible native dialog and remove the mandatory account detour", "priority": 1, "findingIds": [ "F05", "F08", "F09", "F14", "F23" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T02", "title": "Fix accessible names, landmarks, contrast, target sizes and reading typography", "priority": 2, "findingIds": [ "F07", "F12", "F13", "F14", "F15" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T03", "title": "Require explicit analytics consent and harden CSP, security headers and cookies", "priority": 3, "findingIds": [ "F19", "F20", "F23" ], "guidanceId": "privacy", "status": "open" }, { "id": "T04", "title": "Provide a progressively enhanced verification route and real 404 recovery", "priority": 4, "findingIds": [ "F09", "F18", "F21" ], "guidanceId": "html", "status": "open" }, { "id": "T05", "title": "Defer legacy scripts and reduce entry-page LCP render delay", "priority": 5, "findingIds": [ "F10", "F11" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T06", "title": "Add preference-driven theming and reduced-motion handling", "priority": 6, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T07", "title": "Stop loading invisible gallery media and modernise image delivery", "priority": 7, "findingIds": [ "F16", "F25", "F26" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T08", "title": "Repair metadata, language and autocomplete signals", "priority": 8, "findingIds": [ "F17", "F18", "F22", "F24" ], "guidanceId": "html", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-25T22-16-35-992Z" }