{ "url": "https://www.xpaja.net", "auditedAt": "2026-07-20T20:46:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete representative audit of seven paths/conditions. Not covered: authenticated profile management, upload completion, payment/subscription flows, and destructive account actions because they require credentials or irreversible user data.", "page": { "appType": "mpa", "framework": "Server-rendered PHP/Bootstrap/jQuery", "notes": "Public adult video/content site with server-rendered listings, detail pages, category pages, signup, language switching, legacy jQuery/Bootstrap plugins, analytics, and third-party advertising." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "robots.txt", "sitemap.xml", "HTTP status probe" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage desktop entry state", "condition": "desktop" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage mobile entry state", "condition": "360x800" }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "Video detail mobile state", "condition": "360x800" }, { "type": "screenshot", "path": "evidence/category-mobile.png", "caption": "Category listing mobile state", "condition": "360x800" }, { "type": "screenshot", "path": "evidence/signup-mobile.png", "caption": "Signup mobile state", "condition": "360x800" }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "Helpful 404 state", "condition": "360x800" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under dark preference", "condition": "prefers-color-scheme: dark" }, { "type": "screenshot", "path": "evidence/home-light.png", "caption": "Homepage under light preference", "condition": "prefers-color-scheme: light" }, { "type": "screenshot", "path": "evidence/search-flow-mobile.png", "caption": "Result after mobile search submission", "condition": "360x800" }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "Homepage narrow layout metrics", "condition": "360x800" }, { "type": "layout", "path": "evidence/home-layout-desktop.json", "caption": "Homepage desktop layout metrics", "condition": "desktop" }, { "type": "layout", "path": "evidence/detail-layout.json", "caption": "Detail layout metrics", "condition": "360x800" }, { "type": "layout", "path": "evidence/category-layout.json", "caption": "Category layout metrics", "condition": "360x800" }, { "type": "layout", "path": "evidence/search-layout.json", "caption": "Search URL layout metrics", "condition": "360x800" }, { "type": "har", "path": "evidence/home.har", "caption": "Homepage network capture", "condition": "load + 8 seconds" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Homepage network summary", "condition": "load + 8 seconds" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Homepage performance trace", "condition": "load + 8 seconds" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Homepage performance summary", "condition": "load + 8 seconds" }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "Lighthouse homepage JSON", "condition": "mobile" }, { "type": "lighthouse", "path": "evidence/lighthouse-home-summary.json", "caption": "Compact Lighthouse homepage summary", "condition": "mobile" }, { "type": "lighthouse", "path": "evidence/lighthouse-signup.json", "caption": "Lighthouse signup JSON", "condition": "mobile" }, { "type": "lighthouse", "path": "evidence/lighthouse-signup-summary.json", "caption": "Compact Lighthouse signup summary", "condition": "mobile" }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Homepage raw/rendered comparison", "condition": "JavaScript on/off" }, { "type": "discoverability", "path": "evidence/detail-discoverability.json", "caption": "Detail raw/rendered comparison", "condition": "JavaScript on/off" }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Homepage browser view", "condition": "JavaScript on" }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Homepage crawler view", "condition": "JavaScript off" }, { "type": "screenshot", "path": "evidence/detail-discoverability-rendered.png", "caption": "Detail browser view", "condition": "JavaScript on" }, { "type": "screenshot", "path": "evidence/detail-discoverability-crawler.png", "caption": "Detail crawler view", "condition": "JavaScript off" }, { "type": "heap", "path": "evidence/home-heap-baseline.heapsnapshot", "caption": "Baseline heap summary", "condition": "fresh load" }, { "type": "heap", "path": "evidence/home-heap-post.heapsnapshot", "caption": "Heap summary after ten login modal cycles", "condition": "10 cycles" }, { "type": "heap", "path": "evidence/home-heap-comparison.json", "caption": "Heap before/post comparison", "condition": "10 cycles" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Homepage DOM/CSS capture", "condition": "desktop" }, { "type": "dom", "path": "evidence/signup-dom.json", "caption": "Signup DOM/CSS capture", "condition": "desktop" }, { "type": "other", "path": "evidence/home-recon.json", "caption": "home recon" }, { "type": "other", "path": "evidence/home-preferences-css.json", "caption": "home preferences css" }, { "type": "other", "path": "evidence/home-headers.json", "caption": "home headers" }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "home cookies" }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "home trackers" }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "home secrets" }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images" }, { "type": "other", "path": "evidence/home-runtime.json", "caption": "home runtime" }, { "type": "other", "path": "evidence/home-pwa.json", "caption": "home pwa" }, { "type": "other", "path": "evidence/home-platform-probe.json", "caption": "home platform probe" }, { "type": "other", "path": "evidence/detail-probe.json", "caption": "detail probe" }, { "type": "other", "path": "evidence/category-probe.json", "caption": "category probe" }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe" }, { "type": "other", "path": "evidence/search-probe.json", "caption": "search probe" }, { "type": "other", "path": "evidence/signup-controls.json", "caption": "signup controls" }, { "type": "other", "path": "evidence/signup-validation.json", "caption": "signup validation" }, { "type": "other", "path": "evidence/signup-empty-submit.json", "caption": "signup empty submit" }, { "type": "other", "path": "evidence/detail-metadata.json", "caption": "detail metadata" }, { "type": "other", "path": "evidence/english-probe.json", "caption": "english probe" }, { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe" }, { "type": "other", "path": "evidence/404-status.txt", "caption": "404 status" } ], "config": { "loaded": false }, "paths": [ { "id": "home", "description": "Homepage and recommendation feed, representing the primary landing/listing template.", "url": "https://www.xpaja.net/", "conditions": [ "desktop", "mobile 360x800", "prefers-color-scheme: dark/light", "prefers-reduced-motion: reduce", "keyboard focus" ], "result": "issues" }, { "id": "video-detail", "description": "Video detail and playback page, representing the site’s core watch journey.", "url": "https://www.xpaja.net/videos/los-ricos-sentones-de-una-prima-cachonda/", "conditions": [ "mobile 360x800", "JavaScript disabled comparison" ], "result": "issues" }, { "id": "category-listing", "description": "Amateur category page, representing taxonomy/listing templates.", "url": "https://www.xpaja.net/category/amateur", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "signup", "description": "Account registration page, representing the primary form and account flow.", "url": "https://www.xpaja.net/signup/", "conditions": [ "mobile 360x800", "empty submission" ], "result": "issues" }, { "id": "search-flow", "description": "Mobile search submission with “latina”, representing content discovery.", "url": "https://www.xpaja.net/", "conditions": [ "mobile 360x800", "submitted search" ], "result": "issues" }, { "id": "error-404", "description": "Deliberately unknown route, representing HTTP error and recovery handling.", "url": "https://www.xpaja.net/not-a-real-audit-path-404", "conditions": [ "mobile 360x800" ], "result": "pass" }, { "id": "english-locale", "description": "English language switch, representing the localized experience.", "url": "https://www.xpaja.net/lang/en/", "conditions": [ "English locale selected" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "summary": "Theme follows a site toggle, not the system color preference", "evidence": "Dark and light emulation both rendered the same dark theme, and the CSS probe found no color-scheme or prefers-color-scheme rule.", "suggestedFix": "Declare color-scheme and initialize theme colors from prefers-color-scheme, while retaining the manual override.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-dark.png", "evidence/home-light.png", "evidence/home-preferences-css.json" ] }, { "id": "F02", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Continuous motion remains under reduced-motion", "evidence": "With prefers-reduced-motion: reduce, getAnimations() still returned two running 3000 ms repeating animations; only Font Awesome utility animation classes had a reduction rule.", "suggestedFix": "Disable non-essential ad/carousel animation and autoplay under prefers-reduced-motion: reduce.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-preferences-css.json" ] }, { "id": "F03", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "modern-web-guidance", "summary": "High-contrast preferences are not handled", "evidence": "The CSS preference probe found no prefers-contrast or forced-colors rules, while Lighthouse found footer contrast below 4.5:1.", "suggestedFix": "Add forced-colors and prefers-contrast adaptations and avoid fixed low-contrast brand colors for essential text and controls.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ] }, { "id": "F04", "severity": "medium", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "modern-web-guidance", "summary": "Navigation and carousel state use legacy abrupt/custom behavior", "evidence": "The CSS scan found no View Transition or scroll animation timelines, while the HAR loaded Owl Carousel and Hammer.js for interaction behavior.", "suggestedFix": "Progressively enhance route/state changes with View Transitions and prefer CSS scroll snap/scroll-driven effects over legacy gesture libraries.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-platform-probe.json", "evidence/home-summary.json" ] }, { "id": "F05", "severity": "medium", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-position-aware-elements", "guidanceCategory": "modern-web-guidance", "summary": "Fixed navigation and overlays are not state or anchor aware", "evidence": "The runtime probe found multiple fixed layers and Bootstrap role-dialog UI, but no scroll-state container query, anchor positioning, or position-try CSS.", "suggestedFix": "Use scroll-state queries for persistent chrome and CSS anchor positioning with fallback positions for menus and transient UI.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-runtime.json", "evidence/home-platform-probe.json" ] }, { "id": "F06", "severity": "high", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "modern-web-guidance", "summary": "Advertising obscures primary content", "evidence": "Desktop and mobile screenshots show a load-time banner plus a fixed third-party video ad and “VIEW MORE” control covering recommendation cards and video detail content.", "suggestedFix": "Remove load-time interstitial-style ads from the content path; reserve space for ads and make any transient promotion clearly labelled and light-dismissible.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/category-mobile.png" ] }, { "id": "F07", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "modern-web-guidance", "summary": "Dialogs and overlays use ad-hoc Bootstrap containers", "evidence": "The DOM contained role=dialog containers but zero native dialog, popover, or details elements; Lighthouse also found the registration dialog had no accessible name.", "suggestedFix": "Replace custom modal containers with dialog/popover primitives, accessible names, focus management, and declarative light-dismiss where appropriate.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-signup-summary.json" ] }, { "id": "F08", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "summary": "Responsive templates do not use component-level adaptation", "evidence": "Mobile layouts avoid overflow, but the stylesheet scan found no @container/container-type rules, leaving reusable card and navigation components tied to global breakpoints.", "suggestedFix": "Introduce container queries for reusable card grids and navigation components while preserving the current fluid fallback.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-mobile.png", "evidence/category-mobile.png", "evidence/home-platform-probe.json" ] }, { "id": "F09", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Keyboard focus, touch size, and zoom support are incomplete", "evidence": "Focused links and controls computed to outline-style none with no box shadow; Lighthouse found a 20×20 signup close control, and the viewport sets maximum-scale=1.", "suggestedFix": "Add strong :focus-visible styles, increase targets to at least 24×24 CSS px (prefer 44×44), and remove maximum-scale so users can zoom.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-signup-summary.json", "evidence/home-recon.json" ] }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "accessible-error-announcement", "guidanceCategory": "modern-web-guidance", "summary": "Registration errors are not programmatically actionable", "evidence": "Empty registration submission produced a generic terms/age message, but fields had no required, aria-invalid, or aria-describedby state and no visible role=alert was found.", "suggestedFix": "Use native constraints, validate after interaction, associate field-level messages, focus the first invalid field, and announce the summary with role=alert.", "effort": "medium", "pathId": "signup", "url": "https://www.xpaja.net/signup/", "artifacts": [ "evidence/signup-empty-submit.json", "evidence/signup-controls.json", "evidence/signup-mobile.png" ] }, { "id": "F11", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "modern-web-guidance", "summary": "Primary pages miss the good LCP range", "evidence": "Lighthouse measured homepage LCP 3.5 s and signup LCP 6.4 s; the trace measured homepage LCP 3.21 s. TBT stayed low, so load/resource discovery is the main bottleneck.", "suggestedFix": "Prioritize the LCP asset, shorten render-blocking chains, defer third-party media, and verify LCP below 2.5 s on both templates.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json", "evidence/home-trace-summary.json" ] }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-image-priority", "guidanceCategory": "modern-web-guidance", "summary": "Image and resource delivery is wasteful", "evidence": "The image audit found 93/94 images without dimensions, 64 below-fold images not lazy-loaded, 25 oversized images, 61 without srcset, and 93 legacy-format assets. Lighthouse estimated 1,127 KiB image savings and 1,300 ms render-blocking savings.", "suggestedFix": "Size images explicitly, emit responsive srcset/sizes, use modern formats, lazy-load below-fold media, and keep the LCP image eager with fetchpriority=high.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-images.json", "evidence/lighthouse-home-summary.json", "evidence/home-summary.json" ] }, { "id": "F13", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "modern-web-guidance", "summary": "Unused CSS and JavaScript ship on first load", "evidence": "Lighthouse estimated 62 KiB unused CSS and 69 KiB unused JavaScript; the HAR loaded legacy carousel, gesture, ad, analytics, and timezone scripts on the homepage.", "suggestedFix": "Split template-specific code, remove unused legacy plugins, and load optional third-party behavior only after explicit user intent.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-summary.json" ] }, { "id": "F14", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Core controls lack accessible names", "evidence": "Lighthouse found unnamed menu/search buttons and links on the homepage, unnamed signup controls/selects, and an unnamed registration dialog.", "suggestedFix": "Give every control a programmatic name, connect labels to fields/selects, and name dialogs with aria-labelledby.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json", "evidence/signup-controls.json" ] }, { "id": "F15", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Some footer text fails minimum contrast", "evidence": "Lighthouse measured #e4006a on #080808 at 4.29:1 for 14 px footer text, below WCAG AA 4.5:1.", "suggestedFix": "Adjust the pink or background token to meet at least 4.5:1 and test all interactive states.", "effort": "trivial", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ] }, { "id": "F16", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Zoom is restricted and video equivalents are absent", "evidence": "The viewport uses maximum-scale=1; the detail probe found no caption tracks on either video, and Lighthouse found an undersized signup control.", "suggestedFix": "Allow pinch zoom, provide captions/transcripts for meaningful video, and enlarge small targets.", "effort": "medium", "pathId": "video-detail", "url": "https://www.xpaja.net/videos/los-ricos-sentones-de-una-prima-cachonda/", "artifacts": [ "evidence/home-recon.json", "evidence/detail-metadata.json", "evidence/lighthouse-signup-summary.json" ] }, { "id": "F17", "severity": "low", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Document asset hygiene has avoidable defects", "evidence": "Doctype and UTF-8 passed, but Lighthouse found incorrect image aspect ratios and unsized images; its source-map detail also recorded a 404 map reference.", "suggestedFix": "Correct image dimensions/aspect ratios and publish or remove stale sourceMappingURL references.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-images.json" ] }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Localized and rich-page metadata is incomplete", "evidence": "The English switch set lang=en but retained a Spanish title and exposed only hreflang=x-default. The video page used og:type=website and WebSite JSON-LD rather than VideoObject, and had no Twitter metadata.", "suggestedFix": "Emit localized titles/descriptions, reciprocal es/en hreflang URLs, HTTPS share images, and VideoObject metadata matching each video page.", "effort": "medium", "pathId": "video-detail", "url": "https://www.xpaja.net/videos/los-ricos-sentones-de-una-prima-cachonda/", "artifacts": [ "evidence/english-probe.json", "evidence/detail-metadata.json" ] }, { "id": "F19", "severity": "critical", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "summary": "Session transport defenses are unsafe", "evidence": "The site is HTTPS, but CSP and HSTS are absent. PHPSESSID is neither Secure nor HttpOnly and reports SameSite=None; analytics cookies are also insecure and long-lived.", "suggestedFix": "Set Secure, HttpOnly, and an appropriate SameSite value on the session cookie; add HSTS and a restrictive CSP, then modernize framing/referrer/permissions policies.", "effort": "small", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ] }, { "id": "F20", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "modern-web-guidance", "summary": "Heavy tracking and ad activity starts without visible consent", "evidence": "The tracker probe found 13 third-party origins including Google Analytics; the HAR attributed 19 requests and 943,964 bytes to third parties, including 691 KB autoplay ad media. No consent choice was visible in captured entry states.", "suggestedFix": "Gate non-essential analytics and advertising behind informed consent, minimize partners, partition where appropriate, and defer media until user intent.", "effort": "large", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json", "evidence/home-desktop.png" ] }, { "id": "F21", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "summary": "Authentication lacks modern assistance", "evidence": "No permission prompt fired on load, but login/signup are password-only, with no WebAuthn/passkey surface and no autocomplete tokens on email/password fields.", "suggestedFix": "Add correct autocomplete tokens and offer passkey registration/authentication as a phishing-resistant option.", "effort": "medium", "pathId": "signup", "url": "https://www.xpaja.net/signup/", "artifacts": [ "evidence/signup-controls.json", "evidence/home-pwa.json" ] }, { "id": "F22", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "resilient-context-menus-and-nested-dropdowns", "guidanceCategory": "modern-web-guidance", "summary": "A fixed third-party layer masks controls and content", "evidence": "Across mobile templates, a fixed autoplay ad overlaps page content and controls instead of remaining in a bounded, collision-aware region.", "suggestedFix": "Contain third-party media in reserved layout space and use collision-aware anchored/top-layer UI for transient controls.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/category-mobile.png" ] }, { "id": "F23", "severity": "medium", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "translator", "guidanceCategory": "modern-web-guidance", "summary": "The English locale remains partially Spanish and date formatting is not localized", "evidence": "After switching to lang=en, the document title remained Spanish and partner/navigation content was mixed-language; the video detail displayed an English-style date on the Spanish route.", "suggestedFix": "Localize document metadata and all interface strings, and format dates/numbers through Intl for the selected locale.", "effort": "medium", "pathId": "video-detail", "url": "https://www.xpaja.net/videos/los-ricos-sentones-de-una-prima-cachonda/", "artifacts": [ "evidence/english-probe.json", "evidence/detail-mobile.png" ] }, { "id": "F24", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "privacy", "guidanceCategory": "modern-web-guidance", "summary": "Promotional UI is visually coercive and unlabelled", "evidence": "A fixed third-party autoplay panel with a large yellow “VIEW MORE” CTA covers site content, while tracking/advertising starts without a visible consent choice.", "suggestedFix": "Clearly label advertising, never cover the primary task, avoid autoplay, and provide balanced privacy choices before non-essential processing.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/home-trackers.json" ] }, { "id": "F25", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "forms", "guidanceCategory": "modern-web-guidance", "summary": "Account fields do not support autofill or native validation", "evidence": "Signup username/password/email fields and login email/password fields have no autocomplete tokens; signup controls are not native-required and the action is a type=button.", "suggestedFix": "Add username/new-password/email and username/current-password autocomplete tokens, native required constraints, and a semantic submit button.", "effort": "small", "pathId": "signup", "url": "https://www.xpaja.net/signup/", "artifacts": [ "evidence/signup-controls.json", "evidence/signup-empty-submit.json" ] }, { "id": "F26", "severity": "high", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "modern-web-guidance", "summary": "Media and third-party bytes are disproportionate", "evidence": "The homepage transferred 1.85 MB in the HAR, 944 KB from third parties; 93 images use legacy formats and a 341 KB animated GIF plus 691 KB ad video load immediately. Lighthouse observed 7.1 MiB in its run.", "suggestedFix": "Replace GIF/legacy assets, serve responsive modern images, defer autoplay media, and set a template-specific byte budget.", "effort": "medium", "pathId": "home", "url": "https://www.xpaja.net/", "artifacts": [ "evidence/home-summary.json", "evidence/home-images.json", "evidence/lighthouse-home-summary.json" ] } ], "taskList": [ { "id": "T01", "title": "Secure session cookies and deploy CSP/HSTS", "priority": 1, "findingIds": [ "F19" ], "guidanceId": "security", "status": "open" }, { "id": "T02", "title": "Remove or defer content-obscuring ad and tracking layers", "priority": 2, "findingIds": [ "F06", "F20", "F22", "F24", "F26" ], "guidanceId": "privacy", "status": "open" }, { "id": "T03", "title": "Fix accessible names, focus, zoom, targets, and video equivalents", "priority": 3, "findingIds": [ "F03", "F09", "F14", "F15", "F16" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T04", "title": "Optimize responsive images and the critical rendering path", "priority": 4, "findingIds": [ "F11", "F12", "F13", "F17", "F26" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T05", "title": "Make registration semantic, autofillable, and recoverable", "priority": 5, "findingIds": [ "F10", "F21", "F25" ], "guidanceId": "forms", "status": "open" }, { "id": "T06", "title": "Adopt preference-aware theme and motion", "priority": 6, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T07", "title": "Modernize navigation, overlays, gestures, and component responsiveness", "priority": 7, "findingIds": [ "F04", "F05", "F07", "F08" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T08", "title": "Complete localized and video metadata", "priority": 8, "findingIds": [ "F18", "F23" ], "guidanceId": "translator", "status": "open" } ], "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Dark and light emulation both rendered the same dark theme, and the CSS probe found no color-scheme or prefers-color-scheme rule.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-light.png", "evidence/home-preferences-css.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "With prefers-reduced-motion: reduce, getAnimations() still returned two running 3000 ms repeating animations; only Font Awesome utility animation classes had a reduction rule.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-preferences-css.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The CSS preference probe found no prefers-contrast or forced-colors rules, while Lighthouse found footer contrast below 4.5:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The CSS scan found no View Transition or scroll animation timelines, while the HAR loaded Owl Carousel and Hammer.js for interaction behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/home-summary.json" ], "findingIds": [ "F04" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The CSS scan found no View Transition or scroll animation timelines, while the HAR loaded Owl Carousel and Hammer.js for interaction behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/home-summary.json" ], "findingIds": [ "F04" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The CSS scan found no View Transition or scroll animation timelines, while the HAR loaded Owl Carousel and Hammer.js for interaction behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/home-summary.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The runtime probe found multiple fixed layers and Bootstrap role-dialog UI, but no scroll-state container query, anchor positioning, or position-try CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-runtime.json", "evidence/home-platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The runtime probe found multiple fixed layers and Bootstrap role-dialog UI, but no scroll-state container query, anchor positioning, or position-try CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-runtime.json", "evidence/home-platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "screenshot and DOM review", "evidence": "Category/detail navigation uses descriptive headings and active visual grouping; the screenshots show clear destination context.", "pathIds": [ "video-detail", "category-listing" ], "artifacts": [ "evidence/detail-mobile.png", "evidence/category-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Desktop and mobile screenshots show a load-time banner plus a fixed third-party video ad and “VIEW MORE” control covering recommendation cards and video detail content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/category-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The DOM contained role=dialog containers but zero native dialog, popover, or details elements; Lighthouse also found the registration dialog had no accessible name.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-signup-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Desktop and mobile screenshots show a load-time banner plus a fixed third-party video ad and “VIEW MORE” control covering recommendation cards and video detail content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/category-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "layout at 360x800", "evidence": "All tested mobile layouts reported scrollWidth=clientWidth=360 with zero horizontal overflow.", "pathIds": [ "home", "video-detail", "category-listing", "search-flow" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/detail-layout.json", "evidence/category-layout.json", "evidence/search-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Mobile layouts avoid overflow, but the stylesheet scan found no @container/container-type rules, leaving reusable card and navigation components tied to global breakpoints.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/category-mobile.png", "evidence/home-platform-probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Focused links and controls computed to outline-style none with no box shadow; Lighthouse found a 20×20 signup close control, and the viewport sets maximum-scale=1.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-signup-summary.json", "evidence/home-recon.json" ], "findingIds": [ "F09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "visual hierarchy review", "evidence": "The first viewport identifies the content feed and prominent video cards; the detail page places playback first.", "pathIds": [ "home", "video-detail" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "representative task walkthrough", "evidence": "A user can move from the homepage/category listing to a detail page and reach playback without an account wall.", "pathIds": [ "home", "category-listing", "video-detail" ], "artifacts": [ "evidence/category-mobile.png", "evidence/detail-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Empty registration submission produced a generic terms/age message, but fields had no required, aria-invalid, or aria-describedby state and no visible role=alert was found.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-empty-submit.json", "evidence/signup-controls.json", "evidence/signup-mobile.png" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Lighthouse measured homepage LCP 3.5 s and signup LCP 6.4 s; the trace measured homepage LCP 3.21 s. TBT stayed low, so load/resource discovery is the main bottleneck.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "layout shift observers", "evidence": "Observed CLS was 0.018 mobile home, 0.068 desktop home, 0.00002 detail, and 0.033 category, all in the good range.", "pathIds": [ "home", "video-detail", "category-listing" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/home-layout-desktop.json", "evidence/detail-layout.json", "evidence/category-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "trace and Lighthouse", "evidence": "Trace TBT was 38.66 ms with one 88.66 ms task; Lighthouse TBT was 50 ms home and 70 ms signup.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The image audit found 93/94 images without dimensions, 64 below-fold images not lazy-loaded, 25 oversized images, 61 without srcset, and 93 legacy-format assets. Lighthouse estimated 1,127 KiB image savings and 1,300 ms render-blocking savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json", "evidence/lighthouse-home-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Lighthouse estimated 62 KiB unused CSS and 69 KiB unused JavaScript; the HAR loaded legacy carousel, gesture, ad, analytics, and timezone scripts on the homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Lighthouse found unnamed menu/search buttons and links on the homepage, unnamed signup controls/selects, and an unnamed registration dialog.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json", "evidence/signup-controls.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Lighthouse measured #e4006a on #080808 at 4.29:1 for 14 px footer text, below WCAG AA 4.5:1.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Focused links and controls computed to outline-style none with no box shadow; Lighthouse found a 20×20 signup close control, and the viewport sets maximum-scale=1. Lighthouse found unnamed menu/search buttons and links on the homepage, unnamed signup controls/selects, and an unnamed registration dialog.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-signup-summary.json", "evidence/home-recon.json", "evidence/lighthouse-home-summary.json", "evidence/signup-controls.json" ], "findingIds": [ "F09", "F14" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "mobile screenshot review", "evidence": "Core headings and card labels remain readable and reflow into the 360 px layout without horizontal clipping.", "pathIds": [ "home", "video-detail", "category-listing" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/category-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The viewport uses maximum-scale=1; the detail probe found no caption tracks on either video, and Lighthouse found an undersized signup control.", "pathIds": [ "video-detail" ], "artifacts": [ "evidence/home-recon.json", "evidence/detail-metadata.json", "evidence/lighthouse-signup-summary.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse console audit", "evidence": "Lighthouse errors-in-console audit scored 1 on both homepage and signup.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-signup.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Doctype and UTF-8 passed, but Lighthouse found incorrect image aspect ratios and unsized images; its source-map detail also recorded a 404 map reference.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-images.json" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Doctype and UTF-8 passed, but Lighthouse found incorrect image aspect ratios and unsized images; its source-map detail also recorded a 404 map reference.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-images.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM metadata probes", "evidence": "Homepage, category, detail, and signup probes all returned descriptive titles and meta descriptions.", "pathIds": [ "home", "video-detail", "category-listing", "signup" ], "artifacts": [ "evidence/home-recon.json", "evidence/detail-probe.json", "evidence/category-probe.json", "evidence/signup-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Lighthouse SEO, DOM, robots and sitemap review", "evidence": "Lighthouse SEO scored 1.0; real href links, viewport metadata, robots.txt, and a sitemap index were present.", "pathIds": [ "home", "video-detail" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-recon.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The English switch set lang=en but retained a Spanish title and exposed only hreflang=x-default. The video page used og:type=website and WebSite JSON-LD rather than VideoObject, and had no Twitter metadata.", "pathIds": [ "video-detail" ], "artifacts": [ "evidence/english-probe.json", "evidence/detail-metadata.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The English switch set lang=en but retained a Spanish title and exposed only hreflang=x-default. The video page used og:type=website and WebSite JSON-LD rather than VideoObject, and had no Twitter metadata.", "pathIds": [ "video-detail" ], "artifacts": [ "evidence/english-probe.json", "evidence/detail-metadata.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The site is HTTPS, but CSP and HSTS are absent. PHPSESSID is neither Secure nor HttpOnly and reports SameSite=None; analytics cookies are also insecure and long-lived.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The tracker probe found 13 third-party origins including Google Analytics; the HAR attributed 19 requests and 943,964 bytes to third parties, including 691 KB autoplay ad media. No consent choice was visible in captured entry states.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json", "evidence/home-desktop.png" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "No permission prompt fired on load, but login/signup are password-only, with no WebAuthn/passkey surface and no autocomplete tokens on email/password fields.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-controls.json", "evidence/home-pwa.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The site is HTTPS, but CSP and HSTS are absent. PHPSESSID is neither Secure nor HttpOnly and reports SameSite=None; analytics cookies are also insecure and long-lived.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "raw HTML vs rendered discoverability comparison", "evidence": "Discoverability measured 99% raw-HTML content coverage on both homepage and detail, with title, h1, and description present without JavaScript.", "pathIds": [ "home", "video-detail" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/detail-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Across mobile templates, a fixed autoplay ad overlaps page content and controls instead of remaining in a bounded, collision-aware region.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/category-mobile.png" ], "findingIds": [ "F22" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and contextual applicability judgement.", "evidence": "This public content site is not presented as an installable application; no manifest or service-worker registration exists, so app install/offline behavior is contextual and not required.", "reason": "This public content site is not presented as an installable application; no manifest or service-worker registration exists, so app install/offline behavior is contextual and not required." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "HTTP status and 404 visual/DOM review", "evidence": "An unknown URL returned HTTP 404 and rendered a useful explanation plus links to recent content.", "pathIds": [ "error-404" ], "artifacts": [ "evidence/404-status.txt", "evidence/404-mobile.png", "evidence/404-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "DOM locale switch probe", "evidence": "The language switch changed html lang from es to en and translated primary navigation/headings; no RTL locale is offered.", "pathIds": [ "home", "english-locale" ], "artifacts": [ "evidence/home-recon.json", "evidence/english-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "After switching to lang=en, the document title remained Spanish and partner/navigation content was mixed-language; the video detail displayed an English-style date on the Spanish route.", "pathIds": [ "video-detail" ], "artifacts": [ "evidence/english-probe.json", "evidence/detail-mobile.png" ], "findingIds": [ "F23" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and contextual applicability judgement.", "evidence": "No scheduling, recurring event, or timezone-sensitive transaction was present on the representative pages.", "reason": "No scheduling, recurring event, or timezone-sensitive transaction was present on the representative pages." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "A fixed third-party autoplay panel with a large yellow “VIEW MORE” CTA covers site content, while tracking/advertising starts without a visible consent choice.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/detail-mobile.png", "evidence/home-trackers.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Empty registration submission produced a generic terms/age message, but fields had no required, aria-invalid, or aria-describedby state and no visible role=alert was found.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-empty-submit.json", "evidence/signup-controls.json", "evidence/signup-mobile.png" ], "findingIds": [ "F10" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "Signup username/password/email fields and login email/password fields have no autocomplete tokens; signup controls are not native-required and the action is a type=button.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-controls.json", "evidence/signup-empty-submit.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "No permission prompt fired on load, but login/signup are password-only, with no WebAuthn/passkey surface and no autocomplete tokens on email/password fields. Signup username/password/email fields and login email/password fields have no autocomplete tokens; signup controls are not native-required and the action is a type=button.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-controls.json", "evidence/home-pwa.json", "evidence/signup-empty-submit.json" ], "findingIds": [ "F21", "F25" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The homepage transferred 1.85 MB in the HAR, 944 KB from third parties; 93 images use legacy formats and a 341 KB animated GIF plus 691 KB ad video load immediately. Lighthouse observed 7.1 MiB in its run.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-images.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The tracker probe found 13 third-party origins including Google Analytics; the HAR attributed 19 requests and 943,964 bytes to third parties, including 691 KB autoplay ad media. No consent choice was visible in captured entry states. The homepage transferred 1.85 MB in the HAR, 944 KB from third parties; 93 images use legacy formats and a 341 KB animated GIF plus 691 KB ad video load immediately. Lighthouse observed 7.1 MiB in its run.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json", "evidence/home-desktop.png", "evidence/home-images.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F20", "F26" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Targeted visual, DOM, CDP, Lighthouse, network, or interaction evidence as cited.", "evidence": "The tracker probe found 13 third-party origins including Google Analytics; the HAR attributed 19 requests and 943,964 bytes to third parties, including 691 KB autoplay ad media. No consent choice was visible in captured entry states. The homepage transferred 1.85 MB in the HAR, 944 KB from third parties; 93 images use legacy formats and a 341 KB animated GIF plus 691 KB ad video load immediately. Lighthouse observed 7.1 MiB in its run.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json", "evidence/home-desktop.png", "evidence/home-images.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F20", "F26" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and contextual applicability judgement.", "evidence": "No declared agent-facing capability or transactional agent surface exists; this emerging check is contextual.", "reason": "No declared agent-facing capability or transactional agent surface exists; this emerging check is contextual." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and contextual applicability judgement.", "evidence": "No summarization or inference use case is exposed; on-device inference would not improve the observed core watch/browse flow.", "reason": "No summarization or inference use case is exposed; on-device inference would not improve the observed core watch/browse flow." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "baseline/post heap summary comparison", "evidence": "After ten login-modal open/close cycles, summary size rose 2.26% and nodes 1.28%, with no repeated-constructor spike; this single pair shows no unbounded growth.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.heapsnapshot", "evidence/home-heap-post.heapsnapshot", "evidence/home-heap-comparison.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "heap summary and DOM count", "evidence": "The homepage heap summary was 12.84 MB across 226,362 nodes, proportionate to a media-rich feed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.heapsnapshot", "evidence/home-runtime.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "before/post heap constructor comparison", "evidence": "Neither heap summary listed Detached constructors among top populations, and closure count changed from 7,764 to 7,873 after ten modal cycles without a large accumulating class.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.heapsnapshot", "evidence/home-heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02", "F03" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15", "F09", "F16" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F22" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F23" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F10", "F25", "F21" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F26", "F20" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing capability or transactional agent surface exists; this emerging check is contextual. No summarization or inference use case is exposed; on-device inference would not improve the observed core watch/browse flow." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "budget": { "wallClockSeconds": 1800, "pathCount": 7, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-20T20-39-57-260Z" }