{ "url": "https://www.wp.pl", "auditedAt": "2026-07-19T18:34:09.279Z", "mode": "report", "status": "completed", "statusDetail": "Representative audit of homepage, news listing, article, login and unknown-route recovery.", "page": { "appType": "mpa", "framework": "unknown", "notes": "Polish media portal with shared consent layer and separate account origin." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "discoverability", "har", "trace", "images", "headers", "cookies", "trackers", "secrets", "lighthouse", "heap-summary" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home.png", "caption": "Consent wall on desktop" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Consent wall clipped and horizontally offset at 360x800", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Dark preference leaves consent surface light", "condition": "prefers-color-scheme: dark" }, { "type": "screenshot", "path": "evidence/home-content.png", "caption": "Homepage entry after attempted consent interaction" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM and CSS" }, { "type": "other", "path": "evidence/home-content-links.json", "caption": "Homepage link inventory after consent interaction" }, { "type": "other", "path": "evidence/news-listing-recon.json", "caption": "News listing headings and link inventory" }, { "type": "other", "path": "evidence/home-probe.json", "caption": "Metadata, semantics, focus, CSS feature and capability probe" }, { "type": "other", "path": "evidence/home-preferences.json", "caption": "Reduced-motion animation and color-scheme probe" }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile overflow and long-task observation", "condition": "viewport: 360x800" }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Raw HTML versus rendered content comparison" }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Rendered homepage crawler comparison" }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "No-JavaScript crawler homepage" }, { "type": "har", "path": "evidence/home.har", "caption": "Homepage network recording" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact homepage network signals" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Homepage DevTools performance trace" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact trace timings and main-thread signals" }, { "type": "other", "path": "evidence/home-images.json", "caption": "Image dimensions, loading, sizing and alt audit" }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "Third-party origin and tracker audit" }, { "type": "other", "path": "evidence/home-headers.json", "caption": "Security response headers" }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "Cookie security attributes" }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "Client-exposed secret scan" }, { "type": "screenshot", "path": "evidence/news-listing.png", "caption": "News listing consent entry state" }, { "type": "screenshot", "path": "evidence/news-listing-mobile.png", "caption": "News listing at 360x800", "condition": "viewport: 360x800" }, { "type": "dom", "path": "evidence/news-listing-dom.json", "caption": "News listing rendered DOM" }, { "type": "screenshot", "path": "evidence/article.png", "caption": "Article entry state" }, { "type": "screenshot", "path": "evidence/article-mobile.png", "caption": "Article at 360x800", "condition": "viewport: 360x800" }, { "type": "dom", "path": "evidence/article-dom.json", "caption": "Article rendered DOM" }, { "type": "discoverability", "path": "evidence/article-discoverability.json", "caption": "Article raw HTML versus rendered comparison" }, { "type": "screenshot", "path": "evidence/article-discoverability-rendered.png", "caption": "Rendered article crawler comparison" }, { "type": "screenshot", "path": "evidence/article-discoverability-crawler.png", "caption": "No-JavaScript crawler article" }, { "type": "screenshot", "path": "evidence/login.png", "caption": "Account sign-in form" }, { "type": "dom", "path": "evidence/login-dom.json", "caption": "Account sign-in DOM" }, { "type": "other", "path": "evidence/login-probe.json", "caption": "Sign-in labels, autocomplete and passkey probe" }, { "type": "screenshot", "path": "evidence/login-invalid.png", "caption": "Invalid sign-in submission attempt remains blocked at challenge" }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "Unknown route remains covered by consent wall" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse performance, accessibility, best-practices and SEO report" }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary" }, { "type": "heap", "path": "evidence/heap-post-scroll.json", "caption": "Heap summary after ten repeated scroll cycles" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Rendered DOM/CSS and targeted CDP probe", "evidence": "Dark emulation produced an identical light consent surface and no preference rule was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png", "evidence/home-dark.png", "evidence/home-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Rendered DOM/CSS and targeted CDP probe", "evidence": "Two infinite 2 s animations remained running while reduce matched.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-preferences.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audit", "evidence": "Lighthouse directly identified insufficient color contrast.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F13" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Rendered DOM/CSS and targeted CDP probe", "evidence": "CSS snapshot contains no View Transition declarations across section/article navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "medium", "method": "CSS and performance trace inspection", "evidence": "CSS snapshot showed no scroll-event animation pattern and no scroll-driven visual effect requiring main-thread linkage; trace had only three bounded long tasks.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-trace-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Rendered CSS/input pattern inspection", "evidence": "CSS probe found native scroll-snap usage and no evidence of custom pointer-driven gesture handling in the rendered entry DOM.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "medium", "method": "Navigation DOM and page screenshot review", "evidence": "The portal uses conventional labelled section navigation; no shrinking/progress chrome is necessary to understand the covered pages.", "pathIds": [ "home", "news-listing" ], "artifacts": [ "evidence/home-dom.json", "evidence/news-listing-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Overlay inventory", "evidence": "No tooltip, popover or edge-positioned menu was present in the covered initial states.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "reason": "No anchored transient overlay exists in the exercised states." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Cross-template navigation and heading review", "evidence": "Descriptive link labels and explicit page headings preserve orientation across homepage, section and article templates.", "pathIds": [ "home", "news-listing", "article" ], "artifacts": [ "evidence/home-content-links.json", "evidence/news-listing-recon.json", "evidence/article-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Cross-template screenshot review", "evidence": "A full-screen consent gate obscures each public content template.", "pathIds": [ "home", "news-listing", "article" ], "artifacts": [ "evidence/home.png", "evidence/news-listing.png", "evidence/article.png" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Rendered DOM/CSS and targeted CDP probe", "evidence": "One full-viewport fixed overlay was present, with zero dialog/popover/details primitives.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Screenshot content/chrome review", "evidence": "The first viewport allocates essentially all visible area to consent chrome instead of requested content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Mobile layout primitive and screenshot", "evidence": "At 360 px, layout measured 972 px content width and 612 px overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Rendered DOM/CSS and targeted CDP probe", "evidence": "No @container rules were exposed and the consent component fails when reused at mobile width.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "pass", "confidence": "medium", "method": "Focus computed style and screenshot review", "evidence": "Programmatic focus on the first action produced a visible 1 px auto outline; primary login controls are large and labelled.", "pathIds": [ "home", "login" ], "artifacts": [ "evidence/home-probe.json", "evidence/login.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Heading/link hierarchy review", "evidence": "Titles and H1s clearly identify WP, News and the article; link text exposes primary content destinations.", "pathIds": [ "home", "news-listing", "article" ], "artifacts": [ "evidence/home-probe.json", "evidence/news-listing-recon.json", "evidence/article-dom.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Representative path walkthrough", "evidence": "Every public content journey is stopped by the same asymmetric consent decision.", "pathIds": [ "home", "news-listing", "article" ], "artifacts": [ "evidence/home.png", "evidence/news-listing.png", "evidence/article.png" ], "findingIds": [ "F08" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Unknown-route walkthrough", "evidence": "Unknown-route state is hidden by the consent wall and shows no visible recovery.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/not-found.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse and CDP trace", "evidence": "Lighthouse LCP was 5.2 s; trace LCP was 2.94 s with 78.61 ms TBT.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout observer and Lighthouse", "evidence": "Layout observer and Lighthouse both measured CLS 0.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "CDP performance trace", "evidence": "Trace recorded three long tasks, 96.12 ms longest and 78.61 ms total blocking time, a bounded main-thread load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "HAR summary", "evidence": "HAR recorded 95 requests, 1.33 MB transfer, 673 KB scripts and 169 KB fonts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "medium", "method": "HAR and Lighthouse resource review", "evidence": "Script delivery dominates the pre-content load at 673 KB across 13 script requests.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility and image audit", "evidence": "Lighthouse failed button-name, link-name and image-alt; image audit found 33 missing alt values.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-images.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audit", "evidence": "Lighthouse color-contrast audit failed.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Semantic DOM and Lighthouse audit", "evidence": "Only one landmark was found and heading order jumps H1 to H3; Lighthouse found an ill-formed accessibility tree.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "Visual legibility review", "evidence": "Desktop consent and login screenshots show readable sizing, line spacing and unclipped text; the failure is reflow, tracked separately.", "pathIds": [ "home", "login" ], "artifacts": [ "evidence/home.png", "evidence/login.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse plus narrow viewport layout", "evidence": "Lighthouse failed user scaling and mobile layout has 612 px overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Lighthouse best-practices audit", "evidence": "Lighthouse best-practices category scored 1.0 and did not report runtime console errors.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "DOM metadata and image audit", "evidence": "Doctype/UTF-8 are valid, but 11 images lack dimensions and 66 are oversized.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-images.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Lighthouse platform audit", "evidence": "Lighthouse reported three BFCache failure reasons.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Discoverability primitive", "evidence": "Homepage and article expose descriptive title and meta description in raw and rendered HTML.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/article-discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "DOM, Lighthouse and mobile layout", "evidence": "Real href links and indexable robots are present, but Lighthouse failed viewport user scaling and mobile reflow is broken.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "Response/raw HTML and DOM metadata", "evidence": "Homepage and article return 200, expose canonical links, and homepage robots is index,follow; content survives raw fetch.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-discoverability.json", "evidence/article-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Article metadata inspection", "evidence": "Article has social metadata but no JSON-LD structured data block.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-dom.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers and cookie audit", "evidence": "HTTPS/CSP/nosniff exist, but HSTS is absent and three observed cookies are not Secure.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Tracker, network and cookie audit", "evidence": "Seven third-party origins, DoubleClick and several 390 to 400 day identifiers were observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-cookies.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Authentication DOM/capability probe", "evidence": "No permission prompt appeared, but the covered account flow offers password sign-in with no WebAuthn/passkey path.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/login.png" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Security header audit", "evidence": "HSTS and Permissions-Policy are absent; referrer policy is no-referrer-when-downgrade.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Raw versus rendered discoverability comparison", "evidence": "Article raw HTML retains 67% word coverage but omits its semantic H1.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-discoverability.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Mobile runtime layout exercise", "evidence": "The fixed consent runtime layer overflows by 612 px on mobile.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F24" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Manifest/service-worker and site-type judgement", "evidence": "This public editorial MPA exposes a manifest/service-worker capability, but its core task is current online news rather than an installable offline app.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "reason": "Offline/installability is contextual and not required for this current-news portal." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Unknown-route walkthrough", "evidence": "The unknown route does not visibly communicate failure or recovery before consent.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/not-found.png" ], "findingIds": [ "F25" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "DOM language and CSS logical-property probe", "evidence": "HTML lang is pl and rendered CSS includes logical inline/block properties.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "medium", "method": "Rendered locale output review", "evidence": "The Polish news listing renders localized relative timestamps such as “6 min” and “19:48” under lang=pl.", "pathIds": [ "news-listing" ], "artifacts": [ "evidence/news-listing-recon.json", "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "medium", "method": "Representative content/context review", "evidence": "Covered portal pages display publication recency but do not expose a user flow coordinating scheduled events across time zones.", "pathIds": [ "news-listing" ], "artifacts": [ "evidence/news-listing-recon.json" ], "reason": "No cross-zone scheduling or partial-time user flow exists in the covered scope." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Consent screenshot and action-label review", "evidence": "Reject is visually secondary and labelled as a detour to learn more while accept is the direct primary action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png" ], "findingIds": [ "F26" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Invalid form submission exercise", "evidence": "Login fields are not natively required and invalid submission produced no visible field-level recovery before the challenge.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json", "evidence/login-invalid.png" ], "findingIds": [ "F27" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Form autocomplete probe", "evidence": "Password has current-password but the login/email field has an empty autocomplete token.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Account-flow screenshot and DOM review", "evidence": "Covered account page clearly exposes password recovery, new-account action, social alternatives and security FAQ; no pricing/continuity commitment is present.", "pathIds": [ "login" ], "artifacts": [ "evidence/login.png", "evidence/login-probe.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Image audit", "evidence": "Image audit found 66 oversized images and 11 missing responsive srcset.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "medium", "method": "CDP trace review", "evidence": "Trace found three bounded long tasks and 78.61 ms total blocking time rather than continuous background main-thread work.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR and tracker budget review", "evidence": "Scripts transfer 673 KB and seven third-party origins load before content access.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trackers.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Capability probe and contextual applicability judgement", "evidence": "No developer intent or public transaction/tool surface indicates WebMCP capability is expected for this editorial portal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "reason": "Agent-facing tools are emerging and no agent transaction surface is declared." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Capability and task-context review", "evidence": "The covered editorial and account journeys do not require on-device summarization or generation to complete their core task.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "reason": "On-device inference is an optional enhancement, not necessary for the covered core task." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Baseline and post-interaction heap summary comparison", "evidence": "Ten repeated scroll cycles increased summarized heap self-size only 29,464 bytes (0.09%) and node count by 690 across isolated equivalent loads.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Heap summary footprint judgement", "evidence": "Baseline summarized heap self-size was 32.0 MB for a media-rich portal entry state, proportionate to the page purpose.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Before/after constructor and total comparison", "evidence": "Neither heap summary listed Detached constructors among top populations, and repeated-scroll growth was negligible.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-scroll.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02", "F13" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14", "F15" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21", "F22" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F23", "F24", "F25" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F26", "F27", "F28" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F29", "F30" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "Agent-facing tools are emerging and no agent transaction surface is declared." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Portal homepage and consent entry state, representing the primary discovery journey.", "url": "https://www.wp.pl/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "no JavaScript crawler" ], "result": "issues" }, { "id": "news-listing", "description": "News section listing, representing a major content index template.", "url": "https://wiadomosci.wp.pl/", "conditions": [ "desktop", "viewport: 360x800" ], "result": "issues" }, { "id": "article", "description": "Current news article, representing the editorial detail template and crawler visibility.", "url": "https://wiadomosci.wp.pl/wrze-w-kijowie-tysiace-ludzi-na-ulicach-przeciwko-decyzji-zelenskiego-7308028075038720a", "conditions": [ "desktop", "viewport: 360x800", "no JavaScript crawler" ], "result": "issues" }, { "id": "login", "description": "WP account sign-in, representing the primary account form and authentication journey.", "url": "https://www.wp.pl/auth/v1/sso/auth?continue_url=https%3A%2F%2Fwww.wp.pl%2F&flow=select_account", "conditions": [ "desktop", "invalid submission attempt" ], "result": "issues" }, { "id": "not-found", "description": "Unknown route, representing HTTP/navigation recovery behavior.", "url": "https://www.wp.pl/this-route-should-not-exist-audit", "conditions": [ "desktop" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "summary": "The entry experience does not visibly adapt to dark preference.", "evidence": "The light and dark screenshots are byte-identical at 108,096 bytes, and the computed CSS probe found no prefers-color-scheme rule while the consent surface stayed white.", "suggestedFix": "Apply color-scheme: light dark and preference-driven surface/text tokens, including the consent layer.", "artifacts": [ "evidence/home.png", "evidence/home-dark.png", "evidence/home-probe.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F02", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "user-experience", "summary": "Animations continue under reduced-motion preference.", "evidence": "The reduced-motion probe confirmed the media query matched while two running animations, each 2000 ms with unbounded iterations, remained active.", "suggestedFix": "Disable or substantially reduce non-essential repeating animations inside prefers-reduced-motion: reduce.", "artifacts": [ "evidence/home-preferences.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "user-experience", "summary": "Major cross-document navigation has no View Transition treatment.", "evidence": "The authored CSS collected by the DOM probe contained no view-transition usage across a portal dominated by article and section navigation.", "suggestedFix": "Progressively enhance same-origin article and section navigation with cross-document View Transitions and a reduced-motion fallback.", "artifacts": [ "evidence/home-dom.json", "evidence/home-probe.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F04", "severity": "high", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "summary": "A consent interstitial obscures all primary content on every public template.", "evidence": "Desktop homepage, listing and article screenshots show a full-viewport consent wall before content can be used.", "suggestedFix": "Use a compact, non-blocking consent surface where legally possible, with equal access to accept, reject and manage options.", "artifacts": [ "evidence/home.png", "evidence/news-listing.png", "evidence/article.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F05", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "summary": "The blocking consent layer is not exposed as a native dialog.", "evidence": "The DOM probe found one full-viewport fixed overlay but zero dialog, popover or details primitives.", "suggestedFix": "Represent modal consent with a correctly labelled dialog, focus containment and predictable dismissal/choice controls.", "artifacts": [ "evidence/home-dom.json", "evidence/home-probe.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F06", "severity": "critical", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "summary": "The consent experience is unusable at a 360 px viewport.", "evidence": "Layout reported scrollWidth 972 versus clientWidth 360, 612 px horizontal overflow; the mobile screenshot starts mid-copy and clips controls off both sides.", "suggestedFix": "Remove desktop minimum widths from the consent layer, constrain it to 100dvi, and reflow actions and copy intrinsically.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/article-mobile.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F07", "severity": "medium", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "summary": "The component-heavy portal exposes no container-query adaptation.", "evidence": "The rendered stylesheet probe found no @container rules while the same consent component overflows severely on mobile.", "suggestedFix": "Use size container queries for reused cards, navigation and the consent component, with intrinsic fallback layout.", "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F08", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "primary user journey task completion", "guidanceCategory": "user-experience", "summary": "The primary content journey is gated by a coercive consent decision.", "evidence": "All three public archetypes open behind the same full-screen gate, and the reject action is labelled as a detour to learn more rather than an equal direct choice.", "suggestedFix": "Make reject as immediate and prominent as accept, preserve the requested destination, and avoid requiring a settings detour.", "artifacts": [ "evidence/home.png", "evidence/news-listing.png", "evidence/article.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F09", "severity": "medium", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "summary": "Unknown-route recovery is hidden behind the same consent wall.", "evidence": "The deliberate unknown URL screenshot shows the consent gate rather than a clear 404 explanation, useful links or recovery action.", "suggestedFix": "Allow the error template to communicate status and recovery, then layer consent without hiding that state.", "artifacts": [ "evidence/not-found.png" ], "pathId": "not-found", "url": "https://www.wp.pl/this-route-should-not-exist-audit", "effort": "medium" }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "summary": "Cold-load LCP is slow.", "evidence": "Lighthouse measured LCP 5.2 s, Speed Index 6.4 s and time to interactive 8.8 s; the CDP trace separately measured LCP 2.94 s.", "suggestedFix": "Prioritise the LCP asset, reduce early consent/advertising work and defer non-critical scripts.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "large" }, { "id": "F11", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "performance", "summary": "The entry load carries a large early network payload.", "evidence": "The HAR recorded 95 requests and 1,334,692 transferred bytes, including 672,657 script bytes and 168,718 font bytes before the user reaches content.", "suggestedFix": "Defer non-critical scripts, reduce font variants and tighten cache/dependency chains around the LCP path.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "large" }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Controls and media lack accessible names.", "evidence": "Lighthouse failed button-name, link-name and image-alt; the image audit found 33 images missing alt and the DOM probe found six unnamed buttons.", "suggestedFix": "Give every interactive control a programmatic name and provide meaningful alt text or explicit empty alt for decoration.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-images.json", "evidence/home-probe.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F13", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Some foreground/background combinations fail minimum contrast.", "evidence": "Lighthouse failed its color-contrast audit on the rendered entry state.", "suggestedFix": "Adjust text and control color tokens to meet WCAG AA in every preference and consent state.", "artifacts": [ "evidence/lighthouse.json", "evidence/home.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "small" }, { "id": "F14", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "The homepage structure is sparse and heading order skips levels.", "evidence": "The probe found only one landmark and a sequence from H1 directly to numerous H3 headings before H2; Lighthouse also reported an ill-formed accessibility tree for agentic browsing.", "suggestedFix": "Add clear main/nav landmarks and maintain a logical heading hierarchy without skipped levels.", "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F15", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "accessibility", "summary": "The rendered experience fails Lighthouse user-scaling/reflow checks.", "evidence": "Lighthouse failed meta-viewport because a rendered viewport context prevents adequate scaling; independent 360 px evidence also shows 612 px overflow.", "suggestedFix": "Keep user scaling enabled in every document/frame and ensure content reflows at narrow and zoomed widths.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile-layout.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F16", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "summary": "Many images are unsized, oversized or eagerly loaded below the fold.", "evidence": "The image audit found 11 missing dimensions, 66 oversized images and 77 below-fold images without lazy loading.", "suggestedFix": "Reserve dimensions, generate responsive srcset candidates and lazy-load non-critical below-fold imagery.", "artifacts": [ "evidence/home-images.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F17", "severity": "low", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "summary": "The page is not eligible for back/forward cache restoration.", "evidence": "Lighthouse reported three BFCache failure reasons.", "suggestedFix": "Remove avoidable unload handlers and other BFCache blockers identified in the Lighthouse details.", "artifacts": [ "evidence/lighthouse.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "html", "summary": "Editorial pages omit machine-readable structured data.", "evidence": "The representative article has accurate title/social metadata but its rendered DOM contains zero application/ld+json blocks.", "suggestedFix": "Add Article or NewsArticle JSON-LD that matches the visible headline, author, dates and primary image.", "artifacts": [ "evidence/article-dom.json" ], "pathId": "article", "url": "https://wiadomosci.wp.pl/wrze-w-kijowie-tysiace-ludzi-na-ulicach-przeciwko-decyzji-zelenskiego-7308028075038720a", "effort": "small" }, { "id": "F19", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "summary": "Transport and cookie defenses are incomplete.", "evidence": "HTTPS and CSP are present, but HSTS is absent; three cookies are not Secure and all 16 observed cookies use SameSite=None.", "suggestedFix": "Enable HSTS, mark every HTTPS cookie Secure and narrow SameSite to Lax or Strict unless cross-site use is necessary.", "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F20", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "summary": "Tracking requests and long-lived identifiers are present on the pre-choice entry load.", "evidence": "The tracker capture found seven third-party origins including DoubleClick; cookies include multiple identifiers with 390 to 400 day expiry.", "suggestedFix": "Delay non-essential tracking until valid choice, shorten identifier lifetimes and reduce third-party collection.", "artifacts": [ "evidence/home-trackers.json", "evidence/home-cookies.json", "evidence/home.har" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "large" }, { "id": "F21", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "security", "summary": "Sign-in offers passwords and social providers but no passkey path.", "evidence": "The login probe found a password field and no PublicKeyCredential/WebAuthn integration.", "suggestedFix": "Offer passkey registration and authentication alongside recovery-safe fallback methods.", "artifacts": [ "evidence/login.png", "evidence/login-probe.json" ], "pathId": "login", "url": "https://www.wp.pl/auth/v1/sso/auth?continue_url=https%3A%2F%2Fwww.wp.pl%2F&flow=select_account", "effort": "large" }, { "id": "F22", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "summary": "Defensive response policy is incomplete.", "evidence": "Headers include CSP, nosniff and X-Frame-Options, but omit HSTS and Permissions-Policy and use no-referrer-when-downgrade.", "suggestedFix": "Add HSTS and a least-privilege Permissions-Policy, and adopt strict-origin-when-cross-origin or stricter referrer handling.", "artifacts": [ "evidence/home-headers.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "small" }, { "id": "F23", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "stabilize-reactive-state", "guidanceCategory": "performance", "summary": "The raw article response omits its semantic H1 and a material share of rendered words.", "evidence": "Discoverability measured 67% content overlap for the article and reported h1PresentInRaw false, although the rendered page has one H1.", "suggestedFix": "Render the full article headline and core semantic content server-side, then enhance it with JavaScript.", "artifacts": [ "evidence/article-discoverability.json", "evidence/article-discoverability-crawler.png" ], "pathId": "article", "url": "https://wiadomosci.wp.pl/wrze-w-kijowie-tysiace-ludzi-na-ulicach-przeciwko-decyzji-zelenskiego-7308028075038720a", "effort": "medium" }, { "id": "F24", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "resilient-context-menus-and-nested-dropdowns", "guidanceCategory": "css", "summary": "The consent runtime state is clipped rather than robust near narrow viewport edges.", "evidence": "At 360 px the fixed layer remains 972 px wide and controls are partly unreachable.", "suggestedFix": "Use intrinsic sizing and viewport-safe positioning so overlays never exceed the visual viewport.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F25", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "summary": "The tested unknown route does not expose actionable recovery in the initial state.", "evidence": "The unknown-route screenshot is indistinguishable from the homepage consent gate, with no visible error status, home link or retry guidance.", "suggestedFix": "Render a useful 404 state before optional layers, including navigation back to current sections.", "artifacts": [ "evidence/not-found.png" ], "pathId": "not-found", "url": "https://www.wp.pl/this-route-should-not-exist-audit", "effort": "small" }, { "id": "F26", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "custom-button-actions", "guidanceCategory": "forms", "summary": "Consent choices use asymmetric, nudging labels.", "evidence": "Accept is a strong filled action while reject says “reject and learn more”, implying extra work and withholding a direct equal refusal.", "suggestedFix": "Use equally clear accept and reject actions, with settings as a separate neutral option.", "artifacts": [ "evidence/home.png" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "small" }, { "id": "F27", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "guidanceCategory": "forms", "summary": "The login form does not expose native requirements and an attempted invalid submission gives no visible field-level recovery before the challenge.", "evidence": "The probe found required=false on login/password; the invalid attempt screenshot remained at the challenge with no field-specific error.", "suggestedFix": "Declare required fields, validate after interaction and announce clear field-level errors before anti-bot verification.", "artifacts": [ "evidence/login-probe.json", "evidence/login-invalid.png" ], "pathId": "login", "url": "https://www.wp.pl/auth/v1/sso/auth?continue_url=https%3A%2F%2Fwww.wp.pl%2F&flow=select_account", "effort": "small" }, { "id": "F28", "severity": "low", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "forms", "summary": "The email/login field omits an autocomplete token.", "evidence": "The password correctly uses current-password, but the login input autocomplete value is empty.", "suggestedFix": "Add autocomplete=username to the login field while retaining current-password on the password field.", "artifacts": [ "evidence/login-probe.json" ], "pathId": "login", "url": "https://www.wp.pl/auth/v1/sso/auth?continue_url=https%3A%2F%2Fwww.wp.pl%2F&flow=select_account", "effort": "trivial" }, { "id": "F29", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "performance", "summary": "Image delivery wastes bytes through oversized and non-responsive assets.", "evidence": "The image audit identified 66 images with natural dimensions over twice their displayed size and 11 without srcset.", "suggestedFix": "Serve responsive modern image candidates sized to their rendered slots.", "artifacts": [ "evidence/home-images.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "medium" }, { "id": "F30", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "summary": "Third-party and script cost is high before content access.", "evidence": "The HAR transferred 672,657 script bytes while tracker evidence found seven third-party origins on the consent-gated entry load.", "suggestedFix": "Defer advertising and analytics until needed and set a third-party byte/request budget.", "artifacts": [ "evidence/home-summary.json", "evidence/home-trackers.json" ], "pathId": "home", "url": "https://www.wp.pl/", "effort": "large" } ], "taskList": [ { "id": "T01", "title": "Remove desktop minimum widths from the consent layer, constrain it to 100dvi, and reflow actions and copy intrinsically.", "priority": 1, "findingIds": [ "F06" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Use a compact, non-blocking consent surface where legally possible, with equal access to accept, reject and manage options.", "priority": 2, "findingIds": [ "F04" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T03", "title": "Make reject as immediate and prominent as accept, preserve the requested destination, and avoid requiring a settings detour.", "priority": 3, "findingIds": [ "F08" ], "guidanceId": "primary user journey task completion", "status": "open" }, { "id": "T04", "title": "Prioritise the LCP asset, reduce early consent/advertising work and defer non-critical scripts.", "priority": 4, "findingIds": [ "F10" ], "guidanceId": "performance", "status": "open" }, { "id": "T05", "title": "Give every interactive control a programmatic name and provide meaningful alt text or explicit empty alt for decoration.", "priority": 5, "findingIds": [ "F12" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T06", "title": "Keep user scaling enabled in every document/frame and ensure content reflows at narrow and zoomed widths.", "priority": 6, "findingIds": [ "F15" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T07", "title": "Enable HSTS, mark every HTTPS cookie Secure and narrow SameSite to Lax or Strict unless cross-site use is necessary.", "priority": 7, "findingIds": [ "F19" ], "guidanceId": "security", "status": "open" }, { "id": "T08", "title": "Delay non-essential tracking until valid choice, shorten identifier lifetimes and reduce third-party collection.", "priority": 8, "findingIds": [ "F20" ], "guidanceId": "privacy", "status": "open" }, { "id": "T09", "title": "Apply color-scheme: light dark and preference-driven surface/text tokens, including the consent layer.", "priority": 9, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T10", "title": "Disable or substantially reduce non-essential repeating animations inside prefers-reduced-motion: reduce.", "priority": 10, "findingIds": [ "F02" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T11", "title": "Represent modal consent with a correctly labelled dialog, focus containment and predictable dismissal/choice controls.", "priority": 11, "findingIds": [ "F05" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T12", "title": "Use size container queries for reused cards, navigation and the consent component, with intrinsic fallback layout.", "priority": 12, "findingIds": [ "F07" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T13", "title": "Allow the error template to communicate status and recovery, then layer consent without hiding that state.", "priority": 13, "findingIds": [ "F09" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T14", "title": "Defer non-critical scripts, reduce font variants and tighten cache/dependency chains around the LCP path.", "priority": 14, "findingIds": [ "F11" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T15", "title": "Adjust text and control color tokens to meet WCAG AA in every preference and consent state.", "priority": 15, "findingIds": [ "F13" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T16", "title": "Add clear main/nav landmarks and maintain a logical heading hierarchy without skipped levels.", "priority": 16, "findingIds": [ "F14" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T17", "title": "Reserve dimensions, generate responsive srcset candidates and lazy-load non-critical below-fold imagery.", "priority": 17, "findingIds": [ "F16" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T18", "title": "Add Article or NewsArticle JSON-LD that matches the visible headline, author, dates and primary image.", "priority": 18, "findingIds": [ "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T19", "title": "Offer passkey registration and authentication alongside recovery-safe fallback methods.", "priority": 19, "findingIds": [ "F21" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T20", "title": "Add HSTS and a least-privilege Permissions-Policy, and adopt strict-origin-when-cross-origin or stricter referrer handling.", "priority": 20, "findingIds": [ "F22" ], "guidanceId": "security", "status": "open" }, { "id": "T21", "title": "Render the full article headline and core semantic content server-side, then enhance it with JavaScript.", "priority": 21, "findingIds": [ "F23" ], "guidanceId": "stabilize-reactive-state", "status": "open" }, { "id": "T22", "title": "Use intrinsic sizing and viewport-safe positioning so overlays never exceed the visual viewport.", "priority": 22, "findingIds": [ "F24" ], "guidanceId": "resilient-context-menus-and-nested-dropdowns", "status": "open" }, { "id": "T23", "title": "Render a useful 404 state before optional layers, including navigation back to current sections.", "priority": 23, "findingIds": [ "F25" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T24", "title": "Use equally clear accept and reject actions, with settings as a separate neutral option.", "priority": 24, "findingIds": [ "F26" ], "guidanceId": "custom-button-actions", "status": "open" }, { "id": "T25", "title": "Declare required fields, validate after interaction and announce clear field-level errors before anti-bot verification.", "priority": 25, "findingIds": [ "F27" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T26", "title": "Serve responsive modern image candidates sized to their rendered slots.", "priority": 26, "findingIds": [ "F29" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T27", "title": "Defer advertising and analytics until needed and set a third-party byte/request budget.", "priority": 27, "findingIds": [ "F30" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T28", "title": "Progressively enhance same-origin article and section navigation with cross-document View Transitions and a reduced-motion fallback.", "priority": 28, "findingIds": [ "F03" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T29", "title": "Remove avoidable unload handlers and other BFCache blockers identified in the Lighthouse details.", "priority": 29, "findingIds": [ "F17" ], "guidanceId": "html", "status": "open" }, { "id": "T30", "title": "Add autocomplete=username to the login field while retaining current-password on the password field.", "priority": 30, "findingIds": [ "F28" ], "guidanceId": "autofill-sign-in-form", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-19T18-34-09-279Z" }