{ "url": "https://www.youporn.com", "auditedAt": "2026-07-27T16:31:25.242Z", "mode": "report", "status": "blocked", "statusDetail": "The requested homepage redirected to a regional login gate. Public login, recovery, support and legal templates were audited, but the primary content and authenticated commercial/account journeys could not be completed.", "page": { "appType": "mpa", "framework": "server-rendered multi-page application", "notes": "Raw HTML contains the content; a manifest and service worker are present. The audit host is regionally forced to /login/." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe", "findingIds": [ "F030" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F005", "F033" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F001", "F005" ] }, { "type": "other", "path": "evidence/home-recon.json", "caption": "home recon", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-login-summary.json", "caption": "lighthouse login summary", "findingIds": [ "F009", "F014", "F019", "F021" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-login.json", "caption": "lighthouse login", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-privacy-summary.json", "caption": "lighthouse privacy summary", "findingIds": [ "F003", "F009", "F013", "F014", "F015", "F019" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-privacy.json", "caption": "lighthouse privacy", "findingIds": [] }, { "type": "other", "path": "evidence/login-cookies.json", "caption": "login cookies", "findingIds": [ "F024" ] }, { "type": "screenshot", "path": "evidence/login-dark.png", "caption": "login dark", "findingIds": [ "F001" ] }, { "type": "screenshot", "path": "evidence/login-discoverability-crawler.png", "caption": "login discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-discoverability-rendered.png", "caption": "login discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/login-discoverability.json", "caption": "login discoverability", "findingIds": [ "F020" ] }, { "type": "screenshot", "path": "evidence/login-forced-colors.png", "caption": "login forced colors", "findingIds": [] }, { "type": "other", "path": "evidence/login-headers.json", "caption": "login headers", "findingIds": [ "F024", "F027" ] }, { "type": "heap", "path": "evidence/login-heap-baseline.heapsnapshot", "caption": "login heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/login-heap-post.heapsnapshot", "caption": "login heap post", "findingIds": [] }, { "type": "other", "path": "evidence/login-images.json", "caption": "login images", "findingIds": [ "F018", "F035" ] }, { "type": "layout", "path": "evidence/login-layout-desktop.json", "caption": "login layout desktop", "findingIds": [] }, { "type": "layout", "path": "evidence/login-layout-mobile.json", "caption": "login layout mobile", "findingIds": [ "F006", "F017" ] }, { "type": "screenshot", "path": "evidence/login-light-reduced.png", "caption": "login light reduced", "findingIds": [ "F001" ] }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "login mobile", "findingIds": [] }, { "type": "other", "path": "evidence/login-motion-probe.json", "caption": "login motion probe", "findingIds": [] }, { "type": "other", "path": "evidence/login-post-interaction-metrics.json", "caption": "login post interaction metrics", "findingIds": [] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "login probe", "findingIds": [ "F002", "F005", "F008", "F011", "F013", "F017", "F020", "F022", "F026", "F031", "F033", "F034" ] }, { "type": "other", "path": "evidence/login-reduced-motion-probe.json", "caption": "login reduced motion probe", "findingIds": [] }, { "type": "other", "path": "evidence/login-secrets.json", "caption": "login secrets", "findingIds": [] }, { "type": "har-summary", "path": "evidence/login-summary.json", "caption": "login summary", "findingIds": [ "F011", "F012", "F025", "F036", "F037" ] }, { "type": "trace-summary", "path": "evidence/login-trace-summary.json", "caption": "login trace summary", "findingIds": [ "F010" ] }, { "type": "trace", "path": "evidence/login-trace.json", "caption": "login trace", "findingIds": [ "F010" ] }, { "type": "other", "path": "evidence/login-trackers.json", "caption": "login trackers", "findingIds": [ "F025", "F033", "F036" ] }, { "type": "har", "path": "evidence/login.har", "caption": "login", "findingIds": [ "F011", "F012", "F025", "F037" ] }, { "type": "screenshot", "path": "evidence/privacy-desktop.png", "caption": "privacy desktop", "findingIds": [ "F003", "F016", "F032" ] }, { "type": "other", "path": "evidence/privacy-probe.json", "caption": "privacy probe", "findingIds": [ "F003", "F004", "F008", "F013", "F015", "F022", "F023", "F031", "F032" ] }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "pwa probe", "findingIds": [ "F029" ] }, { "type": "screenshot", "path": "evidence/reset-mobile.png", "caption": "reset mobile", "findingIds": [] }, { "type": "other", "path": "evidence/reset-probe.json", "caption": "reset probe", "findingIds": [ "F002", "F034" ] }, { "type": "other", "path": "evidence/robots-body.txt", "caption": "robots body", "findingIds": [] }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "robots headers", "findingIds": [ "F021", "F022" ] }, { "type": "other", "path": "evidence/runtime-probe.json", "caption": "runtime probe", "findingIds": [ "F026" ] }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "sitemap headers", "findingIds": [ "F022" ] }, { "type": "screenshot", "path": "evidence/support-invalid-mobile.png", "caption": "support invalid mobile", "findingIds": [] }, { "type": "other", "path": "evidence/support-invalid-probe.json", "caption": "support invalid probe", "findingIds": [] }, { "type": "layout", "path": "evidence/support-layout-mobile.json", "caption": "support layout mobile", "findingIds": [ "F006", "F016", "F028" ] }, { "type": "screenshot", "path": "evidence/support-mobile.png", "caption": "support mobile", "findingIds": [ "F006", "F007", "F016", "F028" ] }, { "type": "other", "path": "evidence/support-probe.json", "caption": "support probe", "findingIds": [ "F004", "F007", "F008", "F017", "F034" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 56, "blocked": 2, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": false }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Light and dark emulations rendered the same black surface, the root computed color-scheme was normal, and the DOM probe found no color-scheme or prefers-color-scheme token.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-light-reduced.png", "evidence/login-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F001" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Compared getAnimations() under reduce and no-preference media emulation.", "evidence": "Both conditions reported zero active animations, so no non-essential motion continued against the preference.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-reduced-motion-probe.json", "evidence/login-motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Captured forced-colors: active and prefers-contrast: more.", "evidence": "The forced-colors screenshot retained visible text, fields, outlines and action links.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The DOM probe found no view-transition token and navigation between login, reset, support and privacy is a full abrupt swap.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/reset-probe.json" ], "findingIds": [ "F002" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "medium", "method": "Inspected rendered CSS/DOM tokens and active animations across long and short templates.", "evidence": "No scroll-linked animation was present, and no scroll-animation anti-pattern was observed on the audited public templates.", "pathIds": [ "login", "privacy" ], "artifacts": [ "evidence/login-probe.json", "evidence/privacy-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Inspected the reachable login, recovery, support and legal templates for swipe, carousel, pull-to-reveal or gesture surfaces.", "evidence": "No gesture-driven control exists on the reachable public templates.", "reason": "There is no representative gesture interaction to assess on the reachable templates." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The privacy page is over 18,000 CSS px tall in Lighthouse, while probes found no scroll-timeline or scroll-state implementation and the screenshot shows static chrome.", "pathIds": [ "login" ], "artifacts": [ "evidence/privacy-desktop.png", "evidence/privacy-probe.json", "evidence/lighthouse-privacy-summary.json" ], "findingIds": [ "F003" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Inspected reachable templates for tooltips, transient popovers and anchored menus.", "evidence": "No tooltip or transient anchored popover was present.", "reason": "The audited reachable templates expose no anchored tooltip/popover interaction." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The public templates use full page swaps and static tab links with no view transition, highlight or post-navigation attention cue.", "pathIds": [ "login" ], "artifacts": [ "evidence/privacy-probe.json", "evidence/support-probe.json" ], "findingIds": [ "F004" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "medium", "method": "Reviewed initial screenshots and DOM overlays on all reachable templates.", "evidence": "No advertising popup or unrelated interstitial appeared; the login gate is the regionally required core surface rather than an incidental interruption.", "pathIds": [ "login", "reset", "support", "privacy" ], "artifacts": [ "evidence/home-desktop.png", "evidence/support-mobile.png", "evidence/privacy-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The login DOM contains one role=dialog and zero dialog elements; the gate is fixed and has no native close/light-dismiss behavior.", "pathIds": [ "login" ], "artifacts": [ "evidence/home-dom.json", "evidence/login-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F005" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Visual review of login and long-form legal templates.", "evidence": "The reachable pages use restrained dark chrome and keep the login form or legal content visually primary.", "pathIds": [ "login", "privacy" ], "artifacts": [ "evidence/home-desktop.png", "evidence/privacy-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "At 360 px, layout probes measured scrollWidth 990 and 630 px horizontal overflow on both login and support. The support screenshot cuts off inputs and navigation.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-layout-mobile.json", "evidence/support-layout-mobile.json", "evidence/support-mobile.png" ], "findingIds": [ "F006" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The support form is clipped at 360 px and the probe found no container-query tokens on reused form/navigation components.", "pathIds": [ "login" ], "artifacts": [ "evidence/support-mobile.png", "evidence/support-probe.json" ], "findingIds": [ "F007" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The probe found many visible links only 15 to 19 px high across login, privacy and support; focus itself was visible with a 2 px outline.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/support-probe.json", "evidence/privacy-probe.json" ], "findingIds": [ "F008" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Reviewed first viewport, headings and controls on login, reset and support.", "evidence": "Login, Forgot Password and Contact Us clearly state purpose and expose one primary action.", "pathIds": [ "login", "reset", "support" ], "artifacts": [ "evidence/home-desktop.png", "evidence/reset-mobile.png", "evidence/support-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "blocked", "confidence": "high", "method": "Attempted the requested homepage and inspected registration/login paths.", "evidence": "The homepage redirected to /login/; no credentials were provided and the page states new registrations are unavailable in the audit region.", "reason": "Authentication and regional registration restrictions prevent an end-to-end primary content journey." }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Exercised empty form submission and inspected recovery links/states.", "evidence": "Native required-field messages appear, and login exposes password/email recovery plus public support links.", "pathIds": [ "login", "reset", "support" ], "artifacts": [ "evidence/support-invalid-probe.json", "evidence/login-probe.json", "evidence/reset-probe.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Mobile Lighthouse measured LCP 5.2 s on login and 4.3 s on privacy, both outside the good range; CLS remained 0.", "pathIds": [ "login" ], "artifacts": [ "evidence/lighthouse-login-summary.json", "evidence/lighthouse-privacy-summary.json" ], "findingIds": [ "F009" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Measured layout shifts with CDP layout observers and Lighthouse.", "evidence": "Login CLS was 0 and support CLS was 0.0049; Lighthouse reported CLS 0 on login and privacy.", "pathIds": [ "login", "support", "privacy" ], "artifacts": [ "evidence/login-layout-mobile.json", "evidence/support-layout-mobile.json", "evidence/lighthouse-login-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The CDP trace recorded one 554.46 ms long task and 504.46 ms total blocking time in the captured load window.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-trace-summary.json", "evidence/login-trace.json" ], "findingIds": [ "F010" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "HAR signals identified three VeryHigh parser-inserted stylesheets and two synchronous head scripts; the live DOM confirmed TrafficJunky and default-default.js are in head without async, defer or module.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-summary.json", "evidence/login-probe.json", "evidence/login.har" ], "findingIds": [ "F011" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The login transferred 567 KB; 400 KB was script, including 298 KB from two Google Tag Manager resources, for a simple two-field login surface.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-summary.json", "evidence/login.har" ], "findingIds": [ "F012" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Lighthouse found aria-required-children and listitem failures on the privacy tab list; probes also found visible controls whose accessible naming depends only on image/title or placeholder patterns.", "pathIds": [ "login" ], "artifacts": [ "evidence/lighthouse-privacy-summary.json", "evidence/privacy-probe.json", "evidence/login-probe.json" ], "findingIds": [ "F013" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Lighthouse found 16 contrast failures on login and 12 on privacy, including white on #ec567c at 3.39:1 and footer text at 3.17:1.", "pathIds": [ "login" ], "artifacts": [ "evidence/lighthouse-login-summary.json", "evidence/lighthouse-privacy-summary.json" ], "findingIds": [ "F014" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Privacy starts with H2 headings, includes an empty H4, and Lighthouse reports no main landmark plus an invalid role=tablist child structure. Keyboard focus was visible on the skip link.", "pathIds": [ "login" ], "artifacts": [ "evidence/privacy-probe.json", "evidence/lighthouse-privacy-summary.json" ], "findingIds": [ "F015" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The 990 px fixed canvas produces 630 px overflow at 360 px; the support and legal templates require sideways navigation, while privacy text uses long dense lines on desktop.", "pathIds": [ "login" ], "artifacts": [ "evidence/support-mobile.png", "evidence/privacy-desktop.png", "evidence/support-layout-mobile.json" ], "findingIds": [ "F016" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "All probed pages declare user-scalable=0, and mobile layout evidence shows 630 px horizontal overflow.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/support-probe.json", "evidence/login-layout-mobile.json" ], "findingIds": [ "F017" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Ran Lighthouse best-practices audits on login and privacy.", "evidence": "Both pages received a 1.0 best-practices category score and no errors-in-console failure was reported.", "pathIds": [ "login", "privacy" ], "artifacts": [ "evidence/lighthouse-login.json", "evidence/lighthouse-privacy.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The image probe found three of six images without both dimensions, three without responsive sources and five legacy-format assets.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-images.json" ], "findingIds": [ "F018" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Lighthouse reported three BFCache failure reasons on both login and privacy.", "pathIds": [ "login" ], "artifacts": [ "evidence/lighthouse-login-summary.json", "evidence/lighthouse-privacy-summary.json" ], "findingIds": [ "F019" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The login probe and raw-HTML discoverability result found a descriptive title and H1 but no meta description.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/login-discoverability.json" ], "findingIds": [ "F020" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "/robots.txt returns a 301 to /robots.txt/ and ultimately the login HTML; Lighthouse reports 913 robots errors. The viewport also disables scaling.", "pathIds": [ "login" ], "artifacts": [ "evidence/robots-headers.txt", "evidence/lighthouse-login-summary.json" ], "findingIds": [ "F021" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Canonical and hreflang links and sitemap.xml are present, but the canonical robots endpoint redirects away instead of returning directives.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/privacy-probe.json", "evidence/robots-headers.txt", "evidence/sitemap-headers.txt" ], "findingIds": [ "F022" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The privacy page exposes zero JSON-LD blocks and no Open Graph tags despite being a public, indexable legal entity page.", "pathIds": [ "login" ], "artifacts": [ "evidence/privacy-probe.json" ], "findingIds": [ "F023" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "HTTPS and HSTS are present, but CSP and nosniff are missing. PHPSESSID and platform cookies lack Secure; all six observed cookies use SameSite=None and none are HttpOnly.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-headers.json", "evidence/login-cookies.json" ], "findingIds": [ "F024" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The tracker probe found 10 third-party origins and Google Analytics, DoubleClick and Tag Manager. HAR attributed 489 KB of 567 KB to third parties.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-trackers.json", "evidence/login-summary.json", "evidence/login.har" ], "findingIds": [ "F025" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "No permission prompt fired on load, but the login DOM contains password fields and the probe found no WebAuthn or navigator.credentials implementation.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/runtime-probe.json" ], "findingIds": [ "F026" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The main response has HSTS and X-Frame-Options, but no CSP/frame-ancestors, Referrer-Policy, Permissions-Policy or X-Content-Type-Options.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-headers.json" ], "findingIds": [ "F027" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Compared raw server HTML with rendered DOM and crawler screenshot.", "evidence": "Discoverability measured 100% rendered-content coverage in raw HTML, with title and H1 present without JavaScript.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-discoverability.json", "evidence/login-discoverability-rendered.png", "evidence/login-discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "At 360 px, the support select, text fields and top navigation extend beyond the viewport on a 990 px canvas.", "pathIds": [ "login" ], "artifacts": [ "evidence/support-mobile.png", "evidence/support-layout-mobile.json" ], "findingIds": [ "F028" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "A manifest and active service worker are registered, but Cache Storage contained no caches after load, providing no evidence of an offline fallback.", "pathIds": [ "login" ], "artifacts": [ "evidence/pwa-probe.json" ], "findingIds": [ "F029" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "A deliberately unknown URL ended at /login/ with the ordinary login page and no 404 or recovery-specific message.", "pathIds": [ "login" ], "artifacts": [ "evidence/404-probe.json" ], "findingIds": [ "F030" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Pages have lang=en and hreflang variants including Arabic, but probes found physical left/right properties and no logical-property tokens.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/privacy-probe.json" ], "findingIds": [ "F031" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The privacy page renders “April 16th, 2026” while advertising many localized variants; no locale-aware date markup or Intl-driven output was observable.", "pathIds": [ "login" ], "artifacts": [ "evidence/privacy-probe.json", "evidence/privacy-desktop.png" ], "findingIds": [ "F032" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Inspected reachable templates for events, times, schedules or recurring time-zone-sensitive data.", "evidence": "No time-zone-sensitive data is rendered in the reachable login, support or legal templates.", "reason": "The audited templates contain no events or times requiring time-zone/DST coordination." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "The gate states registrations are unavailable in the region while the underlying page still offers Sign Up; trackers include Analytics and DoubleClick while cookie choice is only a footer link.", "pathIds": [ "login" ], "artifacts": [ "evidence/home-desktop.png", "evidence/login-probe.json", "evidence/login-trackers.json" ], "findingIds": [ "F033" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "medium", "method": "Submitted the public support form empty and inspected validity state.", "evidence": "Validation occurs after submission and uses clear native “Please fill in this field” messages on required controls.", "pathIds": [ "support" ], "artifacts": [ "evidence/support-invalid-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Login email/password, recovery email and support fields all reported empty autocomplete values.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/reset-probe.json", "evidence/support-probe.json" ], "findingIds": [ "F034" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "blocked", "confidence": "high", "method": "Inspected public support/account options and attempted to reach the authenticated site.", "evidence": "Cancellation categories are publicly findable, but pricing, subscription confirmation and authenticated account-management states require credentials and the regional gate blocks registration.", "reason": "Authenticated commercial and account-management flows could not be entered without an account." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Five of six images are PNG/GIF, three lack complete dimensions and three lack responsive sources.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-images.json" ], "findingIds": [ "F035" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Two Google tag resources transfer 298 KB and tracking spans 10 third-party origins on a simple authentication gate.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-summary.json", "evidence/login-trackers.json" ], "findingIds": [ "F036" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Active visual/DOM/network audit of home-gated, login, reset, support, privacy, not-found as applicable.", "evidence": "Third-party requests account for 489 KB of 567 KB transferred, with tag-manager scripts the two largest resources.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-summary.json", "evidence/login.har" ], "findingIds": [ "F037" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Inspected raw/rendered markup and agentic browsing signals for WebMCP or agent tools.", "evidence": "No structured agent capability is exposed.", "reason": "This adult-content site has no declared agent-facing task surface, and safely exposing such actions is not an assumed requirement." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Inspected reachable markup/scripts for built-in LanguageModel, Summarizer or Translator usage.", "evidence": "No on-device inference use case is present on the reachable templates.", "reason": "Login, support and legal pages do not have a task that requires on-device inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Compared baseline and post-interaction heap summaries after ten empty login submissions.", "evidence": "Node count changed only 162985 to 162997 and self size 7,980,460 to 7,982,195 bytes, with constructor populations effectively stable.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-heap-baseline.heapsnapshot", "evidence/login-heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Reviewed heap totals and post-interaction performance.memory for the login template.", "evidence": "The heap summary was about 8.0 MB self size and performance.memory used about 7.3 MB for a 274-element DOM, proportionate to this page.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-heap-baseline.heapsnapshot", "evidence/login-post-interaction-metrics.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Compared before/after heap constructor and node populations across repeated submission.", "evidence": "No Detached* constructor appeared among retained top constructors, closures stayed at 8857, and only 12 nodes were added after ten repetitions.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-heap-baseline.heapsnapshot", "evidence/login-heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F001" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F002" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F003", "F004" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F005" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F006", "F007", "F008" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "incomplete", "reason": "One or more checks were blocked by the authentication/regional gate." }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F009", "F010", "F011", "F012" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F013", "F014", "F015", "F016", "F017" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F018", "F019" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F020", "F021", "F022", "F023" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F024", "F025", "F026", "F027" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F028", "F029", "F030" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F031", "F032" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F033", "F034" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F035", "F036", "F037" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged not applicable to the reachable site surface." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home-gated", "description": "Requested homepage and primary-content entry; redirected to the regional login/authentication gate, so the catalogue/content journey could not be exercised.", "url": "https://www.youporn.com/", "conditions": [ "desktop", "regional response from audit host" ], "result": "failed" }, { "id": "login", "description": "Authentication and age-gate archetype; inspected visually, structurally, with keyboard/media preferences, performance, network, security, discoverability and memory probes.", "url": "https://www.youporn.com/login/", "conditions": [ "desktop", "360x800", "prefers-color-scheme: light and dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus" ], "result": "issues" }, { "id": "reset", "description": "Password-recovery form archetype and recovery journey.", "url": "https://www.youporn.com/login/forgotpassword/", "conditions": [ "360x800", "DOM/form inspection" ], "result": "issues" }, { "id": "support", "description": "Primary public support/contact form, including invalid submission and recovery state.", "url": "https://www.youporn.com/support/", "conditions": [ "360x800", "empty invalid submission" ], "result": "issues" }, { "id": "privacy", "description": "Long-form public legal/content template used to assess reading, navigation, metadata, accessibility and responsive behavior.", "url": "https://www.youporn.com/information/privacy/", "conditions": [ "desktop", "mobile Lighthouse emulation" ], "result": "issues" }, { "id": "not-found", "description": "Unknown-route recovery attempt; the route redirected to the login gate rather than exposing a distinct 404 recovery page.", "url": "https://www.youporn.com/this-route-does-not-exist-web-uplift/", "conditions": [ "desktop" ], "result": "issues" } ], "findings": [ { "id": "F001", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "severity": "low", "confidence": "high", "summary": "The interface is hard-coded dark rather than following the user color-scheme preference.", "evidence": "Light and dark emulations rendered the same black surface, the root computed color-scheme was normal, and the DOM probe found no color-scheme or prefers-color-scheme token.", "artifacts": [ "evidence/login-light-reduced.png", "evidence/login-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare supported schemes at the root and provide preference-driven color tokens with a deliberate light and dark palette.", "effort": "medium" }, { "id": "F002", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "severity": "low", "confidence": "high", "summary": "Route changes have no directional or continuity transition.", "evidence": "The DOM probe found no view-transition token and navigation between login, reset, support and privacy is a full abrupt swap.", "artifacts": [ "evidence/login-probe.json", "evidence/reset-probe.json" ], "suggestedFix": "Progressively add same-origin cross-document View Transitions, with a reduced-motion fallback.", "effort": "medium" }, { "id": "F003", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "severity": "low", "confidence": "high", "summary": "Long pages provide no scroll-state-aware navigation aid.", "evidence": "The privacy page is over 18,000 CSS px tall in Lighthouse, while probes found no scroll-timeline or scroll-state implementation and the screenshot shows static chrome.", "artifacts": [ "evidence/privacy-desktop.png", "evidence/privacy-probe.json", "evidence/lighthouse-privacy-summary.json" ], "suggestedFix": "Add a lightweight progress indicator or responsive sticky section navigation for long legal pages.", "effort": "medium" }, { "id": "F004", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "provide-guided-navigation", "principleCheckId": "directs-attention", "guidanceId": "directional-navigation-transitions", "severity": "low", "confidence": "high", "summary": "Navigation does not cue where focus or context moved.", "evidence": "The public templates use full page swaps and static tab links with no view transition, highlight or post-navigation attention cue.", "artifacts": [ "evidence/privacy-probe.json", "evidence/support-probe.json" ], "suggestedFix": "Use directional transitions and explicit current-location/focus treatment, respecting reduced motion.", "effort": "medium" }, { "id": "F005", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "severity": "medium", "confidence": "high", "summary": "The authentication gate uses an ad-hoc ARIA dialog instead of the native dialog primitive.", "evidence": "The login DOM contains one role=dialog and zero dialog elements; the gate is fixed and has no native close/light-dismiss behavior.", "artifacts": [ "evidence/home-dom.json", "evidence/login-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Use a native dialog for a genuinely modal gate, with correct focus containment and a clearly documented non-dismissable state when legally required.", "effort": "medium" }, { "id": "F006", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "css-layout", "severity": "critical", "confidence": "high", "summary": "Mobile layouts retain a 990 px desktop canvas and clip primary forms.", "evidence": "At 360 px, layout probes measured scrollWidth 990 and 630 px horizontal overflow on both login and support. The support screenshot cuts off inputs and navigation.", "artifacts": [ "evidence/login-layout-mobile.json", "evidence/support-layout-mobile.json", "evidence/support-mobile.png" ], "suggestedFix": "Replace fixed 990 px widths with intrinsic, fluid layouts and verify every primary form at narrow widths.", "effort": "large" }, { "id": "F007", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "severity": "high", "confidence": "high", "summary": "Forms and navigation do not adapt to their available container.", "evidence": "The support form is clipped at 360 px and the probe found no container-query tokens on reused form/navigation components.", "artifacts": [ "evidence/support-mobile.png", "evidence/support-probe.json" ], "suggestedFix": "Use container queries or intrinsic grid/flex sizing so labels, fields, tabs and CAPTCHA reflow within narrow containers.", "effort": "large" }, { "id": "F008", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "severity": "medium", "confidence": "high", "summary": "Many interactive targets are too short for reliable touch use.", "evidence": "The probe found many visible links only 15 to 19 px high across login, privacy and support; focus itself was visible with a 2 px outline.", "artifacts": [ "evidence/login-probe.json", "evidence/support-probe.json", "evidence/privacy-probe.json" ], "suggestedFix": "Increase interactive hit areas to at least 24 by 24 CSS px, preferably 44 px for primary mobile controls, without removing visible focus.", "effort": "medium" }, { "id": "F009", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "severity": "high", "confidence": "high", "summary": "Largest Contentful Paint is slow on primary public pages.", "evidence": "Mobile Lighthouse measured LCP 5.2 s on login and 4.3 s on privacy, both outside the good range; CLS remained 0.", "artifacts": [ "evidence/lighthouse-login-summary.json", "evidence/lighthouse-privacy-summary.json" ], "suggestedFix": "Profile the LCP dependency, reduce document/server delay, and prioritize the actual LCP resource while deferring non-critical scripts.", "effort": "large" }, { "id": "F010", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "severity": "medium", "confidence": "high", "summary": "A long main-thread task blocks the login page.", "evidence": "The CDP trace recorded one 554.46 ms long task and 504.46 ms total blocking time in the captured load window.", "artifacts": [ "evidence/login-trace-summary.json", "evidence/login-trace.json" ], "suggestedFix": "Attribute the long task, split or defer the responsible work, and schedule non-essential analytics after the page is interactive.", "effort": "medium" }, { "id": "F011", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "severity": "high", "confidence": "high", "summary": "Parser-blocking scripts and a long dependency chain delay content.", "evidence": "HAR signals identified three VeryHigh parser-inserted stylesheets and two synchronous head scripts; the live DOM confirmed TrafficJunky and default-default.js are in head without async, defer or module.", "artifacts": [ "evidence/login-summary.json", "evidence/login-probe.json", "evidence/login.har" ], "suggestedFix": "Defer non-critical head scripts, inline only truly critical CSS, and shorten the LCP dependency chain.", "effort": "large" }, { "id": "F012", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "severity": "medium", "confidence": "high", "summary": "Analytics scripts dominate a simple login page payload.", "evidence": "The login transferred 567 KB; 400 KB was script, including 298 KB from two Google Tag Manager resources, for a simple two-field login surface.", "artifacts": [ "evidence/login-summary.json", "evidence/login.har" ], "suggestedFix": "Audit tag-manager containers and remove, consolidate or conditionally load scripts that do not support the login task.", "effort": "medium" }, { "id": "F013", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Accessibility semantics are invalid or missing on public templates.", "evidence": "Lighthouse found aria-required-children and listitem failures on the privacy tab list; probes also found visible controls whose accessible naming depends only on image/title or placeholder patterns.", "artifacts": [ "evidence/lighthouse-privacy-summary.json", "evidence/privacy-probe.json", "evidence/login-probe.json" ], "suggestedFix": "Repair the tab/list semantics, use native navigation lists where possible, and give every interactive control a robust accessible name.", "effort": "large" }, { "id": "F014", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Text and controls repeatedly fail minimum contrast.", "evidence": "Lighthouse found 16 contrast failures on login and 12 on privacy, including white on #ec567c at 3.39:1 and footer text at 3.17:1.", "artifacts": [ "evidence/lighthouse-login-summary.json", "evidence/lighthouse-privacy-summary.json" ], "suggestedFix": "Adjust brand and muted-text tokens to meet WCAG contrast in every state, and retest with axe/Lighthouse.", "effort": "large" }, { "id": "F015", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Heading, landmark and ARIA structure is inconsistent.", "evidence": "Privacy starts with H2 headings, includes an empty H4, and Lighthouse reports no main landmark plus an invalid role=tablist child structure. Keyboard focus was visible on the skip link.", "artifacts": [ "evidence/privacy-probe.json", "evidence/lighthouse-privacy-summary.json" ], "suggestedFix": "Provide one main landmark, a logical H1-led outline, and valid tab semantics while preserving visible focus.", "effort": "large" }, { "id": "F016", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "severity": "high", "confidence": "high", "summary": "Long-form text is clipped and difficult to read on narrow screens.", "evidence": "The 990 px fixed canvas produces 630 px overflow at 360 px; the support and legal templates require sideways navigation, while privacy text uses long dense lines on desktop.", "artifacts": [ "evidence/support-mobile.png", "evidence/privacy-desktop.png", "evidence/support-layout-mobile.json" ], "suggestedFix": "Use a responsive readable measure, fluid type/spacing, and reflow all legal and form content without horizontal scrolling.", "effort": "large" }, { "id": "F017", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "severity": "critical", "confidence": "high", "summary": "The viewport disables user scaling and the page fails mobile reflow.", "evidence": "All probed pages declare user-scalable=0, and mobile layout evidence shows 630 px horizontal overflow.", "artifacts": [ "evidence/login-probe.json", "evidence/support-probe.json", "evidence/login-layout-mobile.json" ], "suggestedFix": "Remove user-scalable=0 and ensure content reflows at 320 CSS px and 400% zoom without two-dimensional scrolling.", "effort": "large" }, { "id": "F018", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "Image sizing and delivery hygiene are incomplete.", "evidence": "The image probe found three of six images without both dimensions, three without responsive sources and five legacy-format assets.", "artifacts": [ "evidence/login-images.json" ], "suggestedFix": "Add intrinsic width and height, responsive sources where useful, and modern formats for non-vector assets.", "effort": "medium" }, { "id": "F019", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "The pages are not eligible for a clean back-forward cache restore.", "evidence": "Lighthouse reported three BFCache failure reasons on both login and privacy.", "artifacts": [ "evidence/lighthouse-login-summary.json", "evidence/lighthouse-privacy-summary.json" ], "suggestedFix": "Inspect the BFCache audit details, remove avoidable blockers, and preserve page state on back/forward navigation.", "effort": "medium" }, { "id": "F020", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "The login page has no meta description.", "evidence": "The login probe and raw-HTML discoverability result found a descriptive title and H1 but no meta description.", "artifacts": [ "evidence/login-probe.json", "evidence/login-discoverability.json" ], "suggestedFix": "Add a concise, route-specific meta description for the login and recovery surfaces.", "effort": "medium" }, { "id": "F021", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "severity": "high", "confidence": "high", "summary": "robots.txt is not served as a valid robots file and mobile friendliness is compromised.", "evidence": "/robots.txt returns a 301 to /robots.txt/ and ultimately the login HTML; Lighthouse reports 913 robots errors. The viewport also disables scaling.", "artifacts": [ "evidence/robots-headers.txt", "evidence/lighthouse-login-summary.json" ], "suggestedFix": "Serve a plain-text robots.txt at the canonical path and remove scale restrictions from the viewport.", "effort": "large" }, { "id": "F022", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "severity": "high", "confidence": "high", "summary": "Indexing signals are internally inconsistent because robots.txt is broken.", "evidence": "Canonical and hreflang links and sitemap.xml are present, but the canonical robots endpoint redirects away instead of returning directives.", "artifacts": [ "evidence/login-probe.json", "evidence/privacy-probe.json", "evidence/robots-headers.txt", "evidence/sitemap-headers.txt" ], "suggestedFix": "Restore a valid robots.txt and verify its sitemap and crawl rules against canonical and hreflang URLs.", "effort": "large" }, { "id": "F023", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "severity": "low", "confidence": "high", "summary": "Public informational pages lack share and structured metadata.", "evidence": "The privacy page exposes zero JSON-LD blocks and no Open Graph tags despite being a public, indexable legal entity page.", "artifacts": [ "evidence/privacy-probe.json" ], "suggestedFix": "Add accurate Open Graph metadata and appropriate organization/web-page structured data to public information pages.", "effort": "medium" }, { "id": "F024", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "severity": "high", "confidence": "high", "summary": "The login surface lacks baseline security headers and sets insecure cookies.", "evidence": "HTTPS and HSTS are present, but CSP and nosniff are missing. PHPSESSID and platform cookies lack Secure; all six observed cookies use SameSite=None and none are HttpOnly.", "artifacts": [ "evidence/login-headers.json", "evidence/login-cookies.json" ], "suggestedFix": "Deploy a restrictive CSP and nosniff, then mark session cookies Secure, HttpOnly and with the narrowest workable SameSite policy.", "effort": "large" }, { "id": "F025", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "severity": "high", "confidence": "high", "summary": "Tracking and third-party collection are disproportionate on the login gate.", "evidence": "The tracker probe found 10 third-party origins and Google Analytics, DoubleClick and Tag Manager. HAR attributed 489 KB of 567 KB to third parties.", "artifacts": [ "evidence/login-trackers.json", "evidence/login-summary.json", "evidence/login.har" ], "suggestedFix": "Minimize login-page collection, gate optional analytics behind valid consent, and remove third parties that are not necessary for authentication.", "effort": "large" }, { "id": "F026", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkey-authentication", "severity": "high", "confidence": "high", "summary": "Authentication exposes password-only fields with no passkey path.", "evidence": "No permission prompt fired on load, but the login DOM contains password fields and the probe found no WebAuthn or navigator.credentials implementation.", "artifacts": [ "evidence/login-probe.json", "evidence/runtime-probe.json" ], "suggestedFix": "Offer passkey authentication and recovery alongside existing methods, with password autocomplete retained as a fallback.", "effort": "large" }, { "id": "F027", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "severity": "high", "confidence": "high", "summary": "Several browser-enforced defenses are absent.", "evidence": "The main response has HSTS and X-Frame-Options, but no CSP/frame-ancestors, Referrer-Policy, Permissions-Policy or X-Content-Type-Options.", "artifacts": [ "evidence/login-headers.json" ], "suggestedFix": "Add CSP with frame-ancestors, Referrer-Policy, Permissions-Policy and nosniff; stage and monitor CSP before enforcement.", "effort": "large" }, { "id": "F028", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "resilient-context-menus-and-nested-dropdowns", "severity": "high", "confidence": "high", "summary": "Primary controls are cut off rather than repositioning at viewport edges.", "evidence": "At 360 px, the support select, text fields and top navigation extend beyond the viewport on a 990 px canvas.", "artifacts": [ "evidence/support-mobile.png", "evidence/support-layout-mobile.json" ], "suggestedFix": "Make navigation and forms intrinsically responsive so all controls stay reachable at viewport edges.", "effort": "large" }, { "id": "F029", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "conditional-async-dependencies", "severity": "medium", "confidence": "high", "summary": "The installable shell has no observable offline cache.", "evidence": "A manifest and active service worker are registered, but Cache Storage contained no caches after load, providing no evidence of an offline fallback.", "artifacts": [ "evidence/pwa-probe.json" ], "suggestedFix": "Precache a small offline fallback and test navigation with the network disabled while keeping live content online-only.", "effort": "medium" }, { "id": "F030", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "severity": "medium", "confidence": "high", "summary": "Unknown routes redirect to login instead of explaining the failure.", "evidence": "A deliberately unknown URL ended at /login/ with the ordinary login page and no 404 or recovery-specific message.", "artifacts": [ "evidence/404-probe.json" ], "suggestedFix": "Return an intentional 404/error state with clear links back to safe entry points instead of silently changing the destination.", "effort": "medium" }, { "id": "F031", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "severity": "medium", "confidence": "high", "summary": "Localized routes are advertised but layouts rely on physical CSS.", "evidence": "Pages have lang=en and hreflang variants including Arabic, but probes found physical left/right properties and no logical-property tokens.", "artifacts": [ "evidence/login-probe.json", "evidence/privacy-probe.json" ], "suggestedFix": "Use logical inline/block properties and verify dir=rtl rendering on the advertised Arabic locale.", "effort": "medium" }, { "id": "F032", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "format-human-readable-durations", "severity": "low", "confidence": "high", "summary": "Visible dates are hard-coded in English rather than locale-aware.", "evidence": "The privacy page renders “April 16th, 2026” while advertising many localized variants; no locale-aware date markup or Intl-driven output was observable.", "artifacts": [ "evidence/privacy-probe.json", "evidence/privacy-desktop.png" ], "suggestedFix": "Render dates from unambiguous data using Intl.DateTimeFormat for each locale.", "effort": "medium" }, { "id": "F033", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "privacy", "severity": "medium", "confidence": "high", "summary": "The login page presents conflicting account options and runs tracking before a clear consent choice.", "evidence": "The gate states registrations are unavailable in the region while the underlying page still offers Sign Up; trackers include Analytics and DoubleClick while cookie choice is only a footer link.", "artifacts": [ "evidence/home-desktop.png", "evidence/login-probe.json", "evidence/login-trackers.json" ], "suggestedFix": "Remove unavailable calls to action for the current region and present an equally prominent, honest privacy choice before optional tracking.", "effort": "medium" }, { "id": "F034", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "severity": "medium", "confidence": "high", "summary": "Authentication and contact fields omit autocomplete tokens.", "evidence": "Login email/password, recovery email and support fields all reported empty autocomplete values.", "artifacts": [ "evidence/login-probe.json", "evidence/reset-probe.json", "evidence/support-probe.json" ], "suggestedFix": "Add correct autocomplete tokens such as username, current-password, email and name where applicable.", "effort": "medium" }, { "id": "F035", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "severity": "medium", "confidence": "high", "summary": "Several small assets use legacy formats and lack responsive/intrinsic metadata.", "evidence": "Five of six images are PNG/GIF, three lack complete dimensions and three lack responsive sources.", "artifacts": [ "evidence/login-images.json" ], "suggestedFix": "Use SVG/WebP/AVIF where appropriate, provide dimensions, and avoid duplicate logo downloads.", "effort": "medium" }, { "id": "F036", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "severity": "medium", "confidence": "high", "summary": "The login page performs avoidable analytics work.", "evidence": "Two Google tag resources transfer 298 KB and tracking spans 10 third-party origins on a simple authentication gate.", "artifacts": [ "evidence/login-summary.json", "evidence/login-trackers.json" ], "suggestedFix": "Defer or eliminate non-essential analytics and batch only consented measurements after the core task is ready.", "effort": "medium" }, { "id": "F037", "pathId": "login", "url": "https://www.youporn.com/login/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "severity": "high", "confidence": "high", "summary": "Third parties consume most of the login transfer budget.", "evidence": "Third-party requests account for 489 KB of 567 KB transferred, with tag-manager scripts the two largest resources.", "artifacts": [ "evidence/login-summary.json", "evidence/login.har" ], "suggestedFix": "Set a strict third-party budget for authentication pages and enforce it in deployment monitoring.", "effort": "large" } ], "taskList": [ { "id": "T01", "title": "Rebuild public templates as fluid, zoomable mobile layouts", "priority": 1, "findingIds": [ "F006", "F007", "F016", "F017", "F028" ], "guidanceId": "css-layout", "status": "open" }, { "id": "T02", "title": "Harden login headers and cookie attributes", "priority": 2, "findingIds": [ "F024", "F027" ], "guidanceId": "security", "status": "open" }, { "id": "T03", "title": "Reduce authentication-page tracking and third-party script weight", "priority": 3, "findingIds": [ "F012", "F025", "F033", "F036", "F037" ], "guidanceId": "privacy", "status": "open" }, { "id": "T04", "title": "Fix contrast, landmarks and ARIA semantics", "priority": 4, "findingIds": [ "F013", "F014", "F015" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T05", "title": "Improve LCP and unblock resource delivery", "priority": 5, "findingIds": [ "F009", "F010", "F011" ], "guidanceId": "performance", "status": "open" }, { "id": "T06", "title": "Restore valid robots and metadata signals", "priority": 6, "findingIds": [ "F020", "F021", "F022", "F023" ], "guidanceId": "html", "status": "open" }, { "id": "T07", "title": "Modernize authentication with passkeys and autofill", "priority": 7, "findingIds": [ "F026", "F034" ], "guidanceId": "passkey-authentication", "status": "open" }, { "id": "T08", "title": "Adopt preference-aware theming and motion continuity", "priority": 8, "findingIds": [ "F001", "F002", "F003", "F004" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T09", "title": "Improve semantic overlays, targets and platform hygiene", "priority": 9, "findingIds": [ "F005", "F008", "F018", "F019" ], "guidanceId": "html", "status": "open" }, { "id": "T10", "title": "Add resilient offline and error states", "priority": 10, "findingIds": [ "F029", "F030" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T11", "title": "Make localized templates bidi and locale aware", "priority": 11, "findingIds": [ "F031", "F032" ], "guidanceId": "translator", "status": "open" }, { "id": "T12", "title": "Optimize image assets and intrinsic dimensions", "priority": 12, "findingIds": [ "F035" ], "guidanceId": "optimize-image-priority", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-27T16-31-25-242Z" }