{ "url": "https://mastiraja.com", "auditedAt": "2026-07-19T21:07:14.639Z", "mode": "report", "status": "completed", "statusDetail": "Coverage complete: all 58 catalog checks have conclusive outcomes.", "page": { "appType": "mpa", "framework": "WordPress / UltimateTube theme", "notes": "Public adult-video catalog. Representative coverage includes listing, archive, video detail, contact form and 404 recovery. Search, pagination, every category/tag, account completion and destructive form submission were not exercised because their templates/side effects were redundant or unsafe for an external report-only audit." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary comparison", "lighthouse", "HTTP robots/sitemap fetch", "Modern Web Guidance 0.0.172 search" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "css", "accessibility", "soft-edge-content-fade", "accessible-error-announcement", "defer-rendering-heavy-content", "html", "forms", "adapt-scrollbar-to-contrast-preferences", "customize-scrollbar-color-and-thickness", "same-document-transitions", "consistent-cross-document-transitions", "cross-document-transitions", "group-element-transitions", "directional-navigation-transitions", "scrollytelling", "scrollability-affordance-hints", "scroll-position-aware-elements", "shrinking-header-on-scroll", "scroll-target-on-load", "physics-based-easing", "animate-to-intrinsic-sizes", "scroll-progress-indicator", "carousel-slide-effects", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "pull-to-reveal", "anchor-positioning-tab-underline", "resilient-context-menus-and-nested-dropdowns", "position-aware-tooltips", "animate-to-from-top-layer", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "persistent-app-tours", "css-layout", "complex-shapes", "shaped-cutouts", "interactions-in-complex-layouts", "fluid-scaling", "individual-transform-properties", "calculate-with-intrinsic-sizes", "size-aware-styling", "visually-stable-font-fallbacks", "visually-stable-mixed-fonts", "interest-triggered-tooltips", "interactive-content-reveal", "interest-triggered-action-previews", "declarative-button-actions", "stack-drill-down", "capture-location-agnostic-data", "autofill-sign-up-form", "autofill-sign-in-form", "autofill-address-form", "autofill-payment-form", "required-field-feedback", "identify-inp-causes", "performance", "security", "brand-consistent-forms", "improve-text-layout-and-legibility", "break-up-long-tasks", "optimize-image-priority", "optimize-preload-priority", "deliver-optimized-decorative-images", "identify-heavy-scripts", "optimize-script-priority", "detect-initial-visibility-state", "highlight-text-ranges", "branded-select-styling", "move-dom-element-without-losing-state", "persistent-top-layer-ui", "animate-element-entry-exit", "precise-text-alignment", "agentic-forms", "passkey-conditional-create", "validate-input-after-interaction", "reduce-style-repetition", "interactive-content-in-3d-scenes", "expose-canvas-content-to-browser-features", "rich-media-picker", "summarizer", "search-hidden-content", "language-model", "passkey-management", "privacy", "passkey-authentication", "passkeys", "passkey-registration", "flicker-free-client-side-ab-testing", "select-menu-interaction", "custom-select-picker-layouts", "persistent-toast-notifications", "batch-analytics-events", "full-session-analytics", "translator", "language-detection", "support-global-calendar-systems", "coordinate-global-events", "manage-recurring-intervals", "calculate-event-differentials", "model-partial-time-concepts", "sequence-distributed-events", "autofill-highlight-inputs", "visually-texture-content", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-javascript-tools", "faster-spa-view-transitions", "format-human-readable-durations" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage desktop load" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage at 360×800", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under dark preference", "condition": "prefers-color-scheme: dark" }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "Homepage under forced colors", "condition": "forced-colors: active, prefers-contrast: more" }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "Representative video detail mobile", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/contact-mobile.png", "caption": "Contact page mobile", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 recovery mobile", "condition": "viewport: 360x800" }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile overflow, CLS and long-task observation" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered DOM and computed styles" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Performance trace summary" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Raw DevTools performance trace" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact network summary" }, { "type": "har", "path": "evidence/home.har", "caption": "HAR 1.2 network capture" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse performance/accessibility/best-practices/SEO" }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered discoverability" }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered browser view" }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler/no-JS view" }, { "type": "other", "path": "evidence/images.json", "caption": "Image audit" }, { "type": "other", "path": "evidence/headers.json", "caption": "Security headers" }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie audit" }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party/tracker audit" }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan" }, { "type": "heap", "path": "evidence/heap-comparison.json", "caption": "Baseline versus repeated-menu heap totals" }, { "type": "other", "path": "evidence/focus-targets.json", "caption": "Keyboard focus and target-size probe" }, { "type": "other", "path": "evidence/form-validation.json", "caption": "Form validation probe" }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "Document, script and CSS platform probe" }, { "type": "other", "path": "evidence/interaction-probe.json", "caption": "Interaction and modern CSS probe" }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Reduced-motion animation probe" }, { "type": "other", "path": "evidence/player-probe.json", "caption": "Embedded player structure probe" }, { "type": "other", "path": "evidence/recon.json", "caption": "Routes, metadata and structured-data recon" }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt response" }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap.xml response (Cloudflare 403 challenge)" }, { "type": "other", "path": "evidence/guidance-consulted.jsonl", "caption": "Per-check pinned guidance search cache" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using dark, dom", "evidence": "The dark-emulation screenshot is pixel-identical to the light capture; computed html color-scheme is normal and body remains #eee.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Reduced-motion emulation matched; getAnimations() returned none, so no non-essential motion remained to suppress.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Forced-colors/high-contrast screenshot preserves readable text, links, icons and controls with system colors.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using interaction", "evidence": "The platform probe found no authored view-transition rules and this multi-page site exposes many route changes.", "pathIds": [ "home" ], "artifacts": [ "evidence/interaction-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Animation probe found no scroll-linked animation and no active animations; no JS scroll animation anti-pattern was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/interaction-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "The listing uses native scrolling and links; no custom gesture surface or pointer-handler-driven scrolling was observed.", "pathIds": [ "home", "category" ], "artifacts": [ "evidence/interaction-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using dom, layout", "evidence": "DOM and screenshots show static page chrome; no scroll-state container/query or progress indicator was found on long 2,743px and 3,779px pages.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Recon found no tooltip/popover/menu overlay requiring anchored placement, and no drifting overlay was observed.", "pathIds": [ "home", "contact" ], "artifacts": [ "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Active filter is visibly highlighted and the 404 state provides an immediate red Return to Home link plus related content.", "pathIds": [ "home", "404" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Load screenshots on desktop/mobile show content immediately with no modal or banner obscuring it.", "pathIds": [ "home", "category" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "DOM recon found no authored modal/disclosure/popover UI requiring a custom dismiss implementation.", "pathIds": [ "home", "contact" ], "artifacts": [ "evidence/home-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using detail", "evidence": "The mobile detail screenshot places a 320×117 phone-sex ad directly under a 340×191 player, consuming substantial first-screen space and competing with the title.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-mobile.png" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "At 360×800 layout reported scrollWidth 360, innerWidth 360 and zero horizontal overflow; mobile screenshot shows a two-column grid.", "pathIds": [ "home", "category", "detail", "contact" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using interaction, desktop, mobile", "evidence": "The CSS probe found zero @container rules although listing cards are reused in desktop and mobile grids.", "pathIds": [ "home" ], "artifacts": [ "evidence/interaction-probe.json", "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using focus, lh", "evidence": "The focus probe found many links with outline none; Lighthouse failed target-size, including 16px-high footer links.", "pathIds": [ "home" ], "artifacts": [ "evidence/focus-targets.json", "evidence/lighthouse.json" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Homepage clearly labels Newest and exposes video cards; detail page places the play control first.", "pathIds": [ "home", "detail" ], "artifacts": [ "evidence/detail-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using detail, player", "evidence": "The representative detail screenshot shows the player at 00:00 / 00:00 despite schema metadata declaring 02:15, while a large ad immediately competes for attention.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-mobile.png", "evidence/player-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Invalid fields expose native actionable messages and the unknown URL shows Page not found with Return to Home and suggestions.", "pathIds": [ "contact", "404" ], "artifacts": [ "evidence/form-validation.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh, trace", "evidence": "Lighthouse measured LCP 7.1s, Speed Index 8.8s and Time to Interactive 12.5s (performance 0.64), although the unthrottled trace observed LCP near 2.0s.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Mobile layout observation measured CLS 0.00020 with reserved thumbnail geometry.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Trace found one 51.33ms task and only 1.33ms total blocking time over 11.8s.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using har, platform", "evidence": "HAR recorded 96 requests/1.65MB, five VeryHigh parser stylesheets, duplicate Google Fonts CSS, and 404s for preloaded hero.webp and your-theme/style.css.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh, har", "evidence": "Lighthouse estimated 208KiB unused JavaScript and 29KiB unused CSS; GTM alone wastes about 69.6KiB and the theme stylesheet was 83.9% unused.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh", "evidence": "Lighthouse found a full-viewport ad link in the tab order with no name and three injected iframes without titles.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh, mobile", "evidence": "Lighthouse measured 2.32:1 for the homepage help copy and 2.27:1 for green ratings on white, below 4.5:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using focus", "evidence": "The active focus probe reports outline none and no box shadow for menu, filter, and category links; the logo link is also unnamed.", "pathIds": [ "home" ], "artifacts": [ "evidence/focus-targets.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Mobile screenshots show unclipped headings/body text with readable line lengths on listing, detail, contact and 404 templates.", "pathIds": [ "home", "detail", "contact", "404" ], "artifacts": [ "evidence/contact-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using recon, lh", "evidence": "The viewport is width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0; Lighthouse failed meta-viewport and target-size.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/lighthouse.json" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh, har", "evidence": "Lighthouse logged 404 console errors for /wp-content/uploads/hero.webp and /wp-content/themes/your-theme/style.css.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ], "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using images", "evidence": "Image audit found 39/39 legacy PNGs, 35 below-fold images without lazy loading, 31 without srcset, eight oversized, and one image missing dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh", "evidence": "Lighthouse reported 17 deprecation warnings and a subframe unload handler that prevents BFCache restoration.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Rendered/raw recon confirms a descriptive title and meta description on the homepage; contact has a route-specific title.", "pathIds": [ "home", "contact" ], "artifacts": [ "evidence/recon.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Real href links, viewport metadata, index/follow robots and descriptive card text were present; raw HTML retained 100% rendered content tokens.", "pathIds": [ "home", "category", "detail" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using recon, sitemap, robots", "evidence": "The homepage has canonical/index robots and robots.txt is reachable, but /sitemap.xml returned a Cloudflare 403 challenge to a plain HTTP client.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/sitemap.xml", "evidence/robots.txt" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Homepage contains JSON-LD and complete Open Graph title, description, URL and 1200×630 image metadata matching visible content.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using headers, cookies", "evidence": "HTTPS is used, but headers evidence found no CSP, HSTS or nosniff; three first-party cookies were not Secure.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using trackers, har, lh", "evidence": "Tracker evidence found 20 third-party origins, including GA and opaque ad hosts; HAR counted 32 third-party requests/284KB, with a full-viewport unnamed ad link injected into the page.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using contact, platform", "evidence": "The contact-page DOM exposes username/password login and reset forms; no passkey/WebAuthn surface or autocomplete tokens were present.", "pathIds": [ "contact" ], "artifacts": [ "evidence/contact-mobile.png", "evidence/platform-probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using headers", "evidence": "Headers evidence found no CSP/frame-ancestors or X-Frame-Options, HSTS, Referrer-Policy, or general restrictive Permissions-Policy.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Discoverability fetched HTTP 200 raw HTML with 100% content coverage, title, h1 and description without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Representative mobile templates and native validation rendered stable, with no clipped menu/overlay state observed.", "pathIds": [ "home", "contact" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative paths", "evidence": "This is a public streaming/content site whose core media is intrinsically network-dependent; an installable offline app is not a reasonable requirement.", "reason": "This is a public streaming/content site whose core media is intrinsically network-dependent; an installable offline app is not a reasonable requirement.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "A nonexistent route renders a clear 404 heading, explanation, Return to Home and content choices instead of a blank shell.", "pathIds": [ "404" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using platform", "evidence": "The document declares lang=en-US, but the CSS probe counted 116 physical left/right declarations and zero logical-property rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative paths", "evidence": "The sampled site is deliberately English-language and exposes no dates, currencies or locale-sensitive data in the representative paths.", "reason": "The sampled site is deliberately English-language and exposes no dates, currencies or locale-sensitive data in the representative paths.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative paths", "evidence": "No events, schedules or time-zone-sensitive values exist in the sampled paths.", "reason": "No events, schedules or time-zone-sensitive values exist in the sampled paths.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using lh, trackers", "evidence": "Lighthouse found an unnamed injected anchor covering 412×823 and targeting kilojaya.com; opaque ad scripts also inject full-page frames.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/trackers.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Direct visual/objective probe described in evidence", "evidence": "Invalid email and empty required name yield specific native browser validation messages; no premature :user-invalid state appeared.", "pathIds": [ "contact" ], "artifacts": [ "evidence/form-validation.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using contact", "evidence": "Contact name/email fields and login username/password fields expose empty autocomplete attributes.", "pathIds": [ "contact" ], "artifacts": [ "evidence/contact-mobile.png" ], "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using contact", "evidence": "Hidden login/reset forms are password-only and provide neither autocomplete metadata nor visible passkey/reauthentication support.", "pathIds": [ "contact" ], "artifacts": [ "evidence/contact-mobile.png" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using images, har", "evidence": "Images evidence found no modern-format image among 39 assets, 31 missing responsive sources, eight oversized and 35 eager below-fold images.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using har, trackers", "evidence": "HAR captured 96 requests and 24 scripts; tracker evidence found 20 third-party origins before user interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence using har, images", "evidence": "The 1.65MB homepage includes 284KB across 32 third-party requests, 121KB of fonts, and 981KB of mostly eager PNG images.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/images.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative paths", "evidence": "No declared agent-facing intent exists, and this public video catalog exposes no safe transactional capability that requires WebMCP.", "reason": "No declared agent-facing intent exists, and this public video catalog exposes no safe transactional capability that requires WebMCP.", "pathIds": [ "home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon and representative paths", "evidence": "No summarisation or language-model workflow is part of the observed core experience; on-device inference would be optional experimentation.", "reason": "No summarisation or language-model workflow is part of the observed core experience; on-device inference would be optional experimentation.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct visual/objective probe described in evidence", "evidence": "After 20 menu-toggle clicks, node count changed 218,554→218,465 and self size 11,479,371→11,465,617 bytes; no retained growth was observed (medium confidence due separate sessions).", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-comparison.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Direct visual/objective probe described in evidence", "evidence": "Baseline heap self size was 11.48MB with 218,554 nodes, proportionate to this image/listing page and not independently indicative of bloat.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-comparison.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct visual/objective probe described in evidence", "evidence": "The repeated menu exercise did not increase node count or retained self size; no accumulating population signal appeared.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-comparison.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F16", "F17" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21", "F22" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F23" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F25", "F26" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F27", "F28", "F29" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged contextual and not applicable from site recon." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage listing: entry point, navigation, filters, responsive grid, global security/performance and crawler behavior.", "url": "https://mastiraja.com/", "conditions": [ "desktop 780x600", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard-only" ], "result": "issues" }, { "id": "category", "description": "Indian Porn category: representative listing/archive template; other category and tag archives were not duplicated because they share this template.", "url": "https://mastiraja.com/category/indian-porn/", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "detail", "description": "Representative video detail and primary watch journey, including embedded player and advertising.", "url": "https://mastiraja.com/hot-dusky-girl-passionate-first-time/", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "contact", "description": "Contact/support form: representative form and recovery/input-assistance journey.", "url": "https://mastiraja.com/contact-us/", "conditions": [ "mobile 360x800", "invalid input probe" ], "result": "issues" }, { "id": "404", "description": "Unknown URL: representative HTTP/navigation recovery state.", "url": "https://mastiraja.com/audit-missing-page-404", "conditions": [ "mobile 360x800" ], "result": "pass" } ], "findings": [ { "id": "F01", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Dark preference is ignored", "evidence": "The dark-emulation screenshot is pixel-identical to the light capture; computed html color-scheme is normal and body remains #eee.", "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare color-scheme: light dark and retint surfaces/text with prefers-color-scheme or light-dark().", "effort": "small" }, { "id": "F02", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Route changes are abrupt", "evidence": "The platform probe found no authored view-transition rules and this multi-page site exposes many route changes.", "artifacts": [ "evidence/interaction-probe.json" ], "suggestedFix": "Add @view-transition { navigation: auto } and intentional shared transition names with reduced-motion fallback.", "effort": "small" }, { "id": "F03", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Navigation chrome does not react to scroll state", "evidence": "DOM and screenshots show static page chrome; no scroll-state container/query or progress indicator was found on long 2,743px and 3,779px pages.", "artifacts": [ "evidence/home-dom.json", "evidence/home-mobile-layout.json" ], "suggestedFix": "Use sticky scroll-state-aware chrome or a lightweight progress/return affordance on long listings.", "effort": "medium" }, { "id": "F04", "pathId": "detail", "url": "https://mastiraja.com/hot-dusky-girl-passionate-first-time/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "reduce-style-repetition", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Advertising crowds the primary video", "evidence": "The mobile detail screenshot places a 320×117 phone-sex ad directly under a 340×191 player, consuming substantial first-screen space and competing with the title.", "artifacts": [ "evidence/detail-mobile.png" ], "suggestedFix": "Reduce ad chrome around the player, reserve a smaller non-deceptive slot, and keep the primary media/title dominant.", "effort": "medium" }, { "id": "F05", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "Reusable cards rely only on viewport layout", "evidence": "The CSS probe found zero @container rules although listing cards are reused in desktop and mobile grids.", "artifacts": [ "evidence/interaction-probe.json", "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Give reusable listing/card regions container-type and adapt card internals with @container rules while retaining viewport fallbacks.", "effort": "medium" }, { "id": "F06", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Focus visibility and target sizing are inadequate", "evidence": "The focus probe found many links with outline none; Lighthouse failed target-size, including 16px-high footer links.", "artifacts": [ "evidence/focus-targets.json", "evidence/lighthouse.json" ], "suggestedFix": "Restore a strong :focus-visible ring and provide at least 24×24 CSS px target area with adequate spacing.", "effort": "small" }, { "id": "F07", "pathId": "detail", "url": "https://mastiraja.com/hot-dusky-girl-passionate-first-time/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The watch journey does not present a ready media duration", "evidence": "The representative detail screenshot shows the player at 00:00 / 00:00 despite schema metadata declaring 02:15, while a large ad immediately competes for attention.", "artifacts": [ "evidence/detail-mobile.png", "evidence/player-probe.json" ], "suggestedFix": "Load media metadata reliably, show a clear playable state/error fallback, and defer adjacent advertising until it cannot obscure the core watch action.", "effort": "medium" }, { "id": "F08", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "identify-inp-causes", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Mobile lab LCP is slow", "evidence": "Lighthouse measured LCP 7.1s, Speed Index 8.8s and Time to Interactive 12.5s (performance 0.64), although the unthrottled trace observed LCP near 2.0s.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Prioritize the LCP resource, reduce render-blocking/third-party work and validate under mobile throttling.", "effort": "medium" }, { "id": "F09", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-preload-priority", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Critical delivery includes waste and broken preloads", "evidence": "HAR recorded 96 requests/1.65MB, five VeryHigh parser stylesheets, duplicate Google Fonts CSS, and 404s for preloaded hero.webp and your-theme/style.css.", "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json" ], "suggestedFix": "Remove broken/duplicate preloads, consolidate font CSS, and shorten the critical dependency chain.", "effort": "small" }, { "id": "F10", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Substantial unused code ships on the homepage", "evidence": "Lighthouse estimated 208KiB unused JavaScript and 29KiB unused CSS; GTM alone wastes about 69.6KiB and the theme stylesheet was 83.9% unused.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ], "suggestedFix": "Conditionally load page-specific and advertising scripts, trim theme CSS, and remove duplicate dependencies.", "effort": "medium" }, { "id": "F11", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Injected links and frames lack accessible names", "evidence": "Lighthouse found a full-viewport ad link in the tab order with no name and three injected iframes without titles.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Require accessible names for links and meaningful iframe titles; make decorative frames presentational and non-focusable.", "effort": "small" }, { "id": "F12", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Text contrast fails WCAG minimums", "evidence": "Lighthouse measured 2.32:1 for the homepage help copy and 2.27:1 for green ratings on white, below 4.5:1.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile.png" ], "suggestedFix": "Choose darker text/rating colors that meet WCAG AA in every state.", "effort": "small" }, { "id": "F13", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "move-dom-element-without-losing-state", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus disappears across navigation", "evidence": "The active focus probe reports outline none and no box shadow for menu, filter, and category links; the logo link is also unnamed.", "artifacts": [ "evidence/focus-targets.json" ], "suggestedFix": "Use semantic labelled controls and a consistent high-contrast :focus-visible treatment without suppressing the browser outline.", "effort": "small" }, { "id": "F14", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Viewport disables user zoom", "evidence": "The viewport is width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0; Lighthouse failed meta-viewport and target-size.", "artifacts": [ "evidence/recon.json", "evidence/lighthouse.json" ], "suggestedFix": "Remove maximum-scale and user-scalable restrictions and enlarge undersized targets.", "effort": "trivial" }, { "id": "F15", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Broken resources produce console errors", "evidence": "Lighthouse logged 404 console errors for /wp-content/uploads/hero.webp and /wp-content/themes/your-theme/style.css.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ], "suggestedFix": "Remove or correct the broken preload/resource URLs and add deployment checks for 4xx static assets.", "effort": "trivial" }, { "id": "F16", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Image delivery is structurally inefficient", "evidence": "Image audit found 39/39 legacy PNGs, 35 below-fold images without lazy loading, 31 without srcset, eight oversized, and one image missing dimensions.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Add dimensions, responsive srcset/sizes, lazy loading below the fold, and AVIF/WebP variants.", "effort": "medium" }, { "id": "F17", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Deprecated APIs and BFCache blockers remain", "evidence": "Lighthouse reported 17 deprecation warnings and a subframe unload handler that prevents BFCache restoration.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Remove/replace third parties using deprecated APIs and unload handlers; verify BFCache after vendor changes.", "effort": "medium" }, { "id": "F18", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Sitemap is blocked by Cloudflare", "evidence": "The homepage has canonical/index robots and robots.txt is reachable, but /sitemap.xml returned a Cloudflare 403 challenge to a plain HTTP client.", "artifacts": [ "evidence/recon.json", "evidence/sitemap.xml", "evidence/robots.txt" ], "suggestedFix": "Allow crawler access to the XML sitemap and verify robots/sitemap URLs without a browser challenge.", "effort": "small" }, { "id": "F19", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Baseline security headers and cookie flags are missing", "evidence": "HTTPS is used, but headers evidence found no CSP, HSTS or nosniff; three first-party cookies were not Secure.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Set HSTS, a restrictive CSP, nosniff and Secure/SameSite cookie attributes.", "effort": "small" }, { "id": "F20", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "critical", "confidence": "high", "summary": "Extensive opaque advertising and tracking runs by default", "evidence": "Tracker evidence found 20 third-party origins, including GA and opaque ad hosts; HAR counted 32 third-party requests/284KB, with a full-viewport unnamed ad link injected into the page.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/lighthouse.json" ], "suggestedFix": "Remove opaque ad chains, allowlist necessary vendors, gate non-essential analytics on informed consent, and minimise retention.", "effort": "large" }, { "id": "F21", "pathId": "contact", "url": "https://mastiraja.com/contact-us/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "security", "severity": "medium", "confidence": "high", "summary": "Account UI uses password-only authentication without autofill hints", "evidence": "The contact-page DOM exposes username/password login and reset forms; no passkey/WebAuthn surface or autocomplete tokens were present.", "artifacts": [ "evidence/contact-mobile.png", "evidence/platform-probe.json" ], "suggestedFix": "Add correct username/current-password autocomplete immediately and offer passkeys/WebAuthn for authentication.", "effort": "medium" }, { "id": "F22", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Browser-enforced defensive policies are incomplete", "evidence": "Headers evidence found no CSP/frame-ancestors or X-Frame-Options, HSTS, Referrer-Policy, or general restrictive Permissions-Policy.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Deploy frame-ancestors, HSTS, Referrer-Policy, a least-privilege Permissions-Policy and a nonce/hash CSP.", "effort": "small" }, { "id": "F23", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "CSS is not writing-mode resilient", "evidence": "The document declares lang=en-US, but the CSS probe counted 116 physical left/right declarations and zero logical-property rules.", "artifacts": [ "evidence/platform-probe.json" ], "suggestedFix": "Replace directional spacing/positioning with inline/block logical properties and test RTL.", "effort": "medium" }, { "id": "F24", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "custom-button-actions", "guidanceCategory": "user-experience", "severity": "critical", "confidence": "high", "summary": "A deceptive full-viewport ad link enters the tab order", "evidence": "Lighthouse found an unnamed injected anchor covering 412×823 and targeting kilojaya.com; opaque ad scripts also inject full-page frames.", "artifacts": [ "evidence/lighthouse.json", "evidence/trackers.json" ], "suggestedFix": "Remove popunder/full-viewport ad overlays and ensure every commercial link is visible, labelled and user-initiated.", "effort": "large" }, { "id": "F25", "pathId": "contact", "url": "https://mastiraja.com/contact-us/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Forms omit autocomplete assistance", "evidence": "Contact name/email fields and login username/password fields expose empty autocomplete attributes.", "artifacts": [ "evidence/contact-mobile.png" ], "suggestedFix": "Add name, email, username and current-password autocomplete tokens as appropriate.", "effort": "trivial" }, { "id": "F26", "pathId": "contact", "url": "https://mastiraja.com/contact-us/", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "passkey-management", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Account controls lack modern authentication safeguards", "evidence": "Hidden login/reset forms are password-only and provide neither autocomplete metadata nor visible passkey/reauthentication support.", "artifacts": [ "evidence/contact-mobile.png" ], "suggestedFix": "Provide a clear account surface with passkeys, correct autofill, safe recovery and reauthentication for sensitive changes.", "effort": "medium" }, { "id": "F27", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "All audited images use legacy PNG delivery", "evidence": "Images evidence found no modern-format image among 39 assets, 31 missing responsive sources, eight oversized and 35 eager below-fold images.", "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "suggestedFix": "Generate AVIF/WebP variants, use srcset/sizes, and lazy-load below-fold thumbnails.", "effort": "medium" }, { "id": "F28", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "The page performs disproportionate background third-party work", "evidence": "HAR captured 96 requests and 24 scripts; tracker evidence found 20 third-party origins before user interaction.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Defer or remove background analytics/ad fetches and load optional vendors only after explicit need/consent.", "effort": "large" }, { "id": "F29", "pathId": "home", "url": "https://mastiraja.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party and media cost is disproportionate", "evidence": "The 1.65MB homepage includes 284KB across 32 third-party requests, 121KB of fonts, and 981KB of mostly eager PNG images.", "artifacts": [ "evidence/home-summary.json", "evidence/images.json" ], "suggestedFix": "Set page/third-party budgets, self-host/subset fonts, optimize thumbnails, and enforce vendor byte/request caps.", "effort": "medium" } ], "taskList": [ { "id": "T01", "title": "Remove opaque ad chains, allowlist necessary vendors, gate non-essential analytics on informed consent, and minimise retention", "priority": 1, "findingIds": [ "F20" ], "guidanceId": "privacy", "status": "open" }, { "id": "T02", "title": "Remove popunder/full-viewport ad overlays and ensure every commercial link is visible, labelled and user-initiated", "priority": 2, "findingIds": [ "F24" ], "guidanceId": "custom-button-actions", "status": "open" }, { "id": "T03", "title": "Reduce ad chrome around the player, reserve a smaller non-deceptive slot, and keep the primary media/title dominant", "priority": 3, "findingIds": [ "F04" ], "guidanceId": "reduce-style-repetition", "status": "open" }, { "id": "T04", "title": "Restore a strong :focus-visible ring and provide at least 24×24 CSS px target area with adequate spacing", "priority": 4, "findingIds": [ "F06" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T05", "title": "Load media metadata reliably, show a clear playable state/error fallback, and defer adjacent advertising until it cannot obscure the core watch action", "priority": 5, "findingIds": [ "F07" ], "guidanceId": "performance", "status": "open" }, { "id": "T06", "title": "Prioritize the LCP resource, reduce render-blocking/third-party work and validate under mobile throttling", "priority": 6, "findingIds": [ "F08" ], "guidanceId": "identify-inp-causes", "status": "open" }, { "id": "T07", "title": "Require accessible names for links and meaningful iframe titles; make decorative frames presentational and non-focusable", "priority": 7, "findingIds": [ "F11" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T08", "title": "Choose darker text/rating colors that meet WCAG AA in every state", "priority": 8, "findingIds": [ "F12" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T09", "title": "Use semantic labelled controls and a consistent high-contrast :focus-visible treatment without suppressing the browser outline", "priority": 9, "findingIds": [ "F13" ], "guidanceId": "move-dom-element-without-losing-state", "status": "open" }, { "id": "T10", "title": "Remove maximum-scale and user-scalable restrictions and enlarge undersized targets", "priority": 10, "findingIds": [ "F14" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T11", "title": "Set HSTS, a restrictive CSP, nosniff and Secure/SameSite cookie attributes", "priority": 11, "findingIds": [ "F19" ], "guidanceId": "security", "status": "open" }, { "id": "T12", "title": "Deploy frame-ancestors, HSTS, Referrer-Policy, a least-privilege Permissions-Policy and a nonce/hash CSP", "priority": 12, "findingIds": [ "F22" ], "guidanceId": "security", "status": "open" }, { "id": "T13", "title": "Provide a clear account surface with passkeys, correct autofill, safe recovery and reauthentication for sensitive changes", "priority": 13, "findingIds": [ "F26" ], "guidanceId": "passkey-management", "status": "open" }, { "id": "T14", "title": "Generate AVIF/WebP variants, use srcset/sizes, and lazy-load below-fold thumbnails", "priority": 14, "findingIds": [ "F27" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T15", "title": "Defer or remove background analytics/ad fetches and load optional vendors only after explicit need/consent", "priority": 15, "findingIds": [ "F28" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T16", "title": "Set page/third-party budgets, self-host/subset fonts, optimize thumbnails, and enforce vendor byte/request caps", "priority": 16, "findingIds": [ "F29" ], "guidanceId": "efficient-background-processing", "status": "open" }, { "id": "T17", "title": "Declare color-scheme: light dark and retint surfaces/text with prefers-color-scheme or light-dark()", "priority": 17, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T18", "title": "Remove broken/duplicate preloads, consolidate font CSS, and shorten the critical dependency chain", "priority": 18, "findingIds": [ "F09" ], "guidanceId": "optimize-preload-priority", "status": "open" }, { "id": "T19", "title": "Conditionally load page-specific and advertising scripts, trim theme CSS, and remove duplicate dependencies", "priority": 19, "findingIds": [ "F10" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T20", "title": "Remove or correct the broken preload/resource URLs and add deployment checks for 4xx static assets", "priority": 20, "findingIds": [ "F15" ], "guidanceId": "html", "status": "open" }, { "id": "T21", "title": "Add dimensions, responsive srcset/sizes, lazy loading below the fold, and AVIF/WebP variants", "priority": 21, "findingIds": [ "F16" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T22", "title": "Remove/replace third parties using deprecated APIs and unload handlers; verify BFCache after vendor changes", "priority": 22, "findingIds": [ "F17" ], "guidanceId": "html", "status": "open" }, { "id": "T23", "title": "Allow crawler access to the XML sitemap and verify robots/sitemap URLs without a browser challenge", "priority": 23, "findingIds": [ "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T24", "title": "Add correct username/current-password autocomplete immediately and offer passkeys/WebAuthn for authentication", "priority": 24, "findingIds": [ "F21" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T25", "title": "Replace directional spacing/positioning with inline/block logical properties and test RTL", "priority": 25, "findingIds": [ "F23" ], "guidanceId": "translator", "status": "open" }, { "id": "T26", "title": "Add name, email, username and current-password autocomplete tokens as appropriate", "priority": 26, "findingIds": [ "F25" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T27", "title": "Add @view-transition { navigation: auto } and intentional shared transition names with reduced-motion fallback", "priority": 27, "findingIds": [ "F02" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T28", "title": "Use sticky scroll-state-aware chrome or a lightweight progress/return affordance on long listings", "priority": 28, "findingIds": [ "F03" ], "guidanceId": "shrinking-header-on-scroll", "status": "open" }, { "id": "T29", "title": "Give reusable listing/card regions container-type and adapt card internals with @container rules while retaining viewport fallbacks", "priority": 29, "findingIds": [ "F05" ], "guidanceId": "size-aware-styling", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-19T21-07-14-639Z" }