{ "url": "https://xhsocial.com", "auditedAt": "2026-07-21T13:06:48.472Z", "mode": "report", "status": "completed", "statusDetail": "Complete atomic audit across 58 registered checks and five representative paths.", "page": { "appType": "mpa", "framework": "server-rendered custom application", "notes": "Public adult-media listing with localized subdomains, consent/age surfaces, category listing, signup, video detail and server-rendered content." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "images", "headers", "cookies", "trackers", "secrets", "heap-summary", "lighthouse", "curl" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "dom", "path": "evidence/categories-dom.json", "caption": "categories dom json" }, { "type": "screenshot", "path": "evidence/categories.png", "caption": "categories png", "findingIds": [ "F04" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies json", "findingIds": [ "F16" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler png" }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered png" }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability json" }, { "type": "other", "path": "evidence/document-probe.json", "caption": "document probe json", "findingIds": [ "F14", "F20" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers json", "findingIds": [ "F16" ] }, { "type": "heap", "path": "evidence/heap-after-scroll-valid.json", "caption": "heap after scroll valid json" }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline json" }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast png", "findingIds": [ "F11" ], "condition": "prefers-contrast: more" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark png", "findingIds": [ "F01" ], "condition": "prefers-color-scheme: dark" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom json" }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout json", "findingIds": [ "F05" ], "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-mobile-reject.png", "caption": "home mobile reject png", "findingIds": [ "F05", "F06", "F12" ], "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe json", "findingIds": [ "F01", "F04", "F19" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary json", "findingIds": [ "F09", "F17" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary json", "findingIds": [ "F08", "F09" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace json" }, { "type": "har", "path": "evidence/home.har", "caption": "home har", "findingIds": [ "F09" ] }, { "type": "screenshot", "path": "evidence/home.png", "caption": "home png", "findingIds": [ "F03", "F04", "F17" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images json", "findingIds": [ "F13" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home json", "findingIds": [ "F08", "F10", "F11", "F12" ] }, { "type": "other", "path": "evidence/manifest.webmanifest", "caption": "manifest webmanifest", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "memory metrics json" }, { "type": "other", "path": "evidence/modern-css-probe.json", "caption": "modern css probe json", "findingIds": [ "F03", "F06" ] }, { "type": "other", "path": "evidence/not-found-status.txt", "caption": "not found status txt" }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "not found png", "findingIds": [ "F04" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon json", "findingIds": [ "F14", "F20" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "reduced motion json", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "robots headers txt" }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots txt", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets json" }, { "type": "dom", "path": "evidence/signup-dom.json", "caption": "signup dom json" }, { "type": "other", "path": "evidence/signup-email-probe.json", "caption": "signup email probe json", "findingIds": [ "F18", "F21", "F22" ] }, { "type": "screenshot", "path": "evidence/signup-email.png", "caption": "signup email png" }, { "type": "other", "path": "evidence/signup-invalid-probe.json", "caption": "signup invalid probe json", "findingIds": [ "F21" ] }, { "type": "screenshot", "path": "evidence/signup-invalid.png", "caption": "signup invalid png" }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe json", "findingIds": [ "F18" ] }, { "type": "screenshot", "path": "evidence/signup.png", "caption": "signup png" }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap xml", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers json", "findingIds": [ "F17" ] }, { "type": "other", "path": "evidence/video-detail-valid-probe.json", "caption": "video detail valid probe json", "findingIds": [ "F07", "F15" ] }, { "type": "screenshot", "path": "evidence/video-detail-valid.png", "caption": "video detail valid png", "findingIds": [ "F07", "F19" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Default and contrast screenshots keep controls/content visible; specific preference failures are recorded separately.", "evidence": "The dark-emulated screenshot is visually identical to the default dark UI, but the document probe reports computed color-scheme: normal rather than declaring supported schemes.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Default and contrast screenshots keep controls/content visible; specific preference failures are recorded separately.", "evidence": "The reduced-motion probe found eight running shimmer animations with 2,000 ms duration and infinite iterations, and found zero prefers-reduced-motion rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Default and contrast screenshots keep controls/content visible; specific preference failures are recorded separately.", "evidence": "Lighthouse measured the age-verification banner at 2.15:1 and 1.75:1, video-view text at 3.29:1, and also found a link distinguishable only by near-identical colour.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-contrast.png" ], "findingIds": [ "F11" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Representative interaction and CSS probes found native platform interaction without custom pointer/scroll handlers.", "evidence": "The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly.", "pathIds": [ "home" ], "artifacts": [ "evidence/modern-css-probe.json", "evidence/home.png" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Representative interaction and CSS probes found native platform interaction without custom pointer/scroll handlers.", "evidence": "No scroll-linked animation/parallax surface was present, so there is no implementation choice to assess.", "reason": "No scroll-linked animation/parallax surface was present, so there is no implementation choice to assess." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Representative interaction and CSS probes found native platform interaction without custom pointer/scroll handlers.", "evidence": "Modern CSS probe found no custom scroll handlers; page uses native anchor navigation and scrolling.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Persistent nav, headings and 404 return-home affordance make location/action visible; transition exceptions are recorded separately.", "evidence": "The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly.", "pathIds": [ "home" ], "artifacts": [ "evidence/modern-css-probe.json", "evidence/home.png" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Persistent nav, headings and 404 return-home affordance make location/action visible; transition exceptions are recorded separately.", "evidence": "No tooltip, transient popover or anchored menu was exposed on the representative paths.", "reason": "No tooltip, transient popover or anchored menu was exposed on the representative paths." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Persistent nav, headings and 404 return-home affordance make location/action visible; transition exceptions are recorded separately.", "evidence": "The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly.", "pathIds": [ "home" ], "artifacts": [ "evidence/modern-css-probe.json", "evidence/home.png" ], "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Screenshots and semantic probes directly inspect load-time interruptions and chrome.", "evidence": "First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png", "evidence/categories.png", "evidence/not-found.png", "evidence/home-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Screenshots and semantic probes directly inspect load-time interruptions and chrome.", "evidence": "First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png", "evidence/categories.png", "evidence/not-found.png", "evidence/home-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Screenshots and semantic probes directly inspect load-time interruptions and chrome.", "evidence": "First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png", "evidence/categories.png", "evidence/not-found.png", "evidence/home-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Mobile layout, Lighthouse target-size and modern CSS probes cover width, components and input.", "evidence": "The 360x800 layout capture measured scrollWidth 1024 px against a 360 px visual viewport, 664 px horizontal overflow; the screenshot clips the desktop sidebar and content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile-reject.png" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Mobile layout, Lighthouse target-size and modern CSS probes cover width, components and input.", "evidence": "The modern CSS probe found zero container-query rules, while the listing/sidebar composition is reused across widths and visibly clips at 360 px.", "pathIds": [ "home" ], "artifacts": [ "evidence/modern-css-probe.json", "evidence/home-mobile-reject.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Mobile layout, Lighthouse target-size and modern CSS probes cover width, components and input.", "evidence": "Lighthouse found user-scalable=no in the effective mobile viewport and 20 px-high/overlapping targets, failing its meta-viewport and target-size audits.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-mobile-reject.png" ], "findingIds": [ "F12" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Home, category, signup, detail and 404 paths were walked and captured.", "evidence": "Home and category screenshots have a clear H1 and prominent video/category paths; detail metadata has a descriptive H1/title.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Home, category, signup, detail and 404 paths were walked and captured.", "evidence": "Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link.", "pathIds": [ "home" ], "artifacts": [ "evidence/video-detail-valid.png", "evidence/video-detail-valid-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Home, category, signup, detail and 404 paths were walked and captured.", "evidence": "Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link.", "pathIds": [ "home" ], "artifacts": [ "evidence/video-detail-valid.png", "evidence/video-detail-valid-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Trace, layout, HAR, image audit and Lighthouse supply load, stability, main-thread and delivery evidence.", "evidence": "Lighthouse measured LCP 3.2 s on mobile (performance 0.89), while the direct trace measured 1.52 s in a separate desktop-like run; the slower representative condition exceeds the 2.5 s good threshold.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Trace, layout, HAR, image audit and Lighthouse supply load, stability, main-thread and delivery evidence.", "evidence": "Layout observer recorded CLS 0 with no shifts; Lighthouse also measured CLS 0.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace, layout, HAR, image audit and Lighthouse supply load, stability, main-thread and delivery evidence.", "evidence": "Trace found two long tasks, 136.5 ms TBT, while Lighthouse measured 0 ms TBT; no sustained blocking was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Trace, layout, HAR, image audit and Lighthouse supply load, stability, main-thread and delivery evidence.", "evidence": "HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trace-summary.json", "evidence/images.json" ], "findingIds": [ "F09", "F13" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Trace, layout, HAR, image audit and Lighthouse supply load, stability, main-thread and delivery evidence.", "evidence": "HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trace-summary.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility plus screenshots and DOM probes cover semantics, contrast, focus/reflow and text.", "evidence": "Lighthouse found an unnamed button, label/content name mismatches on video links, an li with role=button, and non-li direct children inside a ul; accessibility score was 0.75.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility plus screenshots and DOM probes cover semantics, contrast, focus/reflow and text.", "evidence": "Lighthouse measured the age-verification banner at 2.15:1 and 1.75:1, video-view text at 3.29:1, and also found a link distinguishable only by near-identical colour.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-contrast.png" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility plus screenshots and DOM probes cover semantics, contrast, focus/reflow and text.", "evidence": "Lighthouse found an unnamed button, label/content name mismatches on video links, an li with role=button, and non-li direct children inside a ul; accessibility score was 0.75.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Lighthouse accessibility plus screenshots and DOM probes cover semantics, contrast, focus/reflow and text.", "evidence": "Screenshots show readable body/headline sizing without clipping at the tested desktop condition; contrast exceptions are recorded separately.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility plus screenshots and DOM probes cover semantics, contrast, focus/reflow and text.", "evidence": "Lighthouse found user-scalable=no in the effective mobile viewport and 20 px-high/overlapping targets, failing its meta-viewport and target-size audits.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-mobile-reject.png" ], "findingIds": [ "F12" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse, document probe and image audit cover console, document and browser hygiene.", "evidence": "Lighthouse best-practices scored 1.0 and navigation/evaluate probes completed without an uncaught page exception.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Lighthouse, document probe and image audit cover console, document and browser hygiene.", "evidence": "The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F13" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse, document probe and image audit cover console, document and browser hygiene.", "evidence": "Lighthouse best-practices scored 1.0; no permission prompt appeared on load and scripts are predominantly deferred.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Metadata, raw/rendered discoverability, robots, sitemap and detail social metadata were inspected.", "evidence": "DOM/recon found a descriptive title and meta description; valid detail also has a unique descriptive title.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Metadata, raw/rendered discoverability, robots, sitemap and detail social metadata were inspected.", "evidence": "Discoverability measured 86% raw-content coverage, isJsShell=false, viewport is present, and navigation uses real href links.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Metadata, raw/rendered discoverability, robots, sitemap and detail social metadata were inspected.", "evidence": "The public site exposes many locale subdomains, but the probe found zero hreflang links; /sitemap.xml returned an empty body. The canonical points to the xhamster.com alias, so crawlers lack a complete localized URL map on this host.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/document-probe.json", "evidence/sitemap.xml", "evidence/robots.txt" ], "findingIds": [ "F14" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Metadata, raw/rendered discoverability, robots, sitemap and detail social metadata were inspected.", "evidence": "The valid video-detail probe found comprehensive Open Graph/Twitter metadata but zero JSON-LD blocks for a rich video entity.", "pathIds": [ "home" ], "artifacts": [ "evidence/video-detail-valid-probe.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR were inspected; secrets scan found zero findings.", "evidence": "Headers show CSP limited to frame-ancestors, missing X-Content-Type-Options and Referrer-Policy, while four of five cookies lack Secure and several use SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR were inspected; secrets scan found zero findings.", "evidence": "The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.png", "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR were inspected; secrets scan found zero findings.", "evidence": "The signup path offers Google, X and email/password. Probes found no WebAuthn/passkey affordance or navigator.credentials flow on the representative auth surface.", "pathIds": [ "home" ], "artifacts": [ "evidence/signup-probe.json", "evidence/signup-email-probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Headers, cookies, secrets, trackers and HAR were inspected; secrets scan found zero findings.", "evidence": "Headers show CSP limited to frame-ancestors, missing X-Content-Type-Options and Referrer-Policy, while four of five cookies lack Secure and several use SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "No-JS raw coverage, manifest/SW state, valid 404 and intermittent detail failure were inspected.", "evidence": "Raw HTML returned 200 with title, H1 and description and retained 86% of rendered content words without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "No-JS raw coverage, manifest/SW state, valid 404 and intermittent detail failure were inspected.", "evidence": "Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link.", "pathIds": [ "home" ], "artifacts": [ "evidence/video-detail-valid.png", "evidence/video-detail-valid-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "No-JS raw coverage, manifest/SW state, valid 404 and intermittent detail failure were inspected.", "evidence": "A manifest is linked, but the loaded page had no controlling service worker. The video platform is app-like and its primary detail request also demonstrated a transient 503.", "pathIds": [ "home" ], "artifacts": [ "evidence/manifest.webmanifest", "evidence/home-probe.json", "evidence/video-detail-valid.png" ], "findingIds": [ "F19" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "No-JS raw coverage, manifest/SW state, valid 404 and intermittent detail failure were inspected.", "evidence": "Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link.", "pathIds": [ "home" ], "artifacts": [ "evidence/video-detail-valid.png", "evidence/video-detail-valid-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "lang, locale links, hreflang, logical CSS and locale-sensitive content were inspected.", "evidence": "The page links dozens of language subdomains, but exposes no hreflang links and the CSS probe counted 371 physical left/right declarations versus 19 logical-property occurrences.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/document-probe.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "lang, locale links, hreflang, logical CSS and locale-sensitive content were inspected.", "evidence": "Representative paths did not present dates, currencies or locale-sensitive numeric data.", "reason": "Representative paths did not present dates, currencies or locale-sensitive numeric data." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "lang, locale links, hreflang, logical CSS and locale-sensitive content were inspected.", "evidence": "Representative paths exposed no scheduling or time-zone-sensitive concepts.", "reason": "Representative paths exposed no scheduling or time-zone-sensitive concepts." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Consent and signup paths, input attributes and invalid submission were inspected.", "evidence": "Consent presents equal-size Accept and Reject controls and signup clearly discloses terms, privacy and public-data implications.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Consent and signup paths, input attributes and invalid submission were inspected.", "evidence": "After opening email signup and triggering submit with empty fields, the probe found no invalid elements, no role=alert messages and no visible actionable validation state.", "pathIds": [ "home" ], "artifacts": [ "evidence/signup-invalid-probe.json", "evidence/signup-email-probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Consent and signup paths, input attributes and invalid submission were inspected.", "evidence": "The email signup probe reports autocomplete=off on both email controls; only the password field uses new-password.", "pathIds": [ "home" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Consent and signup paths, input attributes and invalid submission were inspected.", "evidence": "Signup offers federated and email choices and visibly discloses age-verification, terms and data-use commitments before account creation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "HAR bytes/origins, image audit and trace provide direct resource-efficiency evidence.", "evidence": "The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR bytes/origins, image audit and trace provide direct resource-efficiency evidence.", "evidence": "HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trace-summary.json", "evidence/home.png", "evidence/trackers.json" ], "findingIds": [ "F09", "F17" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR bytes/origins, image audit and trace provide direct resource-efficiency evidence.", "evidence": "HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin. The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trace-summary.json", "evidence/home.png", "evidence/trackers.json" ], "findingIds": [ "F09", "F17" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Raw content and DOM/source capability probes were inspected against the emerging contextual principle.", "evidence": "This consumer media site exposes no transaction/productivity capability that agents need to invoke; emerging WebMCP tooling is not applicable to the audited scope.", "reason": "This consumer media site exposes no transaction/productivity capability that agents need to invoke; emerging WebMCP tooling is not applicable to the audited scope." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Raw content and DOM/source capability probes were inspected against the emerging contextual principle.", "evidence": "No summarisation, generation or language workflow was present where on-device inference would improve the core task.", "reason": "No summarisation, generation or language workflow was present where on-device inference would improve the core task." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Baseline/post-interaction heaps and Performance.memory/DOM metrics were compared.", "evidence": "After ten repeated top/bottom scroll cycles the post-interaction heap summary did not show retained growth over baseline; totals decreased after cleanup.", "pathIds": [ "home" ], "artifacts": [ "evidence/memory-metrics.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Baseline/post-interaction heaps and Performance.memory/DOM metrics were compared.", "evidence": "Performance.memory reported 23.3 MB used JS heap with 1,808 DOM nodes, proportionate to the media listing.", "pathIds": [ "home" ], "artifacts": [ "evidence/memory-metrics.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Baseline/post-interaction heaps and Performance.memory/DOM metrics were compared.", "evidence": "Neither heap summary exposed Detached* among top constructors; DOM probe found no inline onclick population. No accumulation signal was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/memory-metrics.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02", "F11" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06", "F12" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F13" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11", "F12" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F13" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17", "F18" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F07", "F19" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F20" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F21", "F22" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F13", "F09", "F17" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All contextual checks were judged not applicable to the audited consumer-media scope." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage/listing and consent entry point; represents primary discovery.", "url": "https://xhsocial.com/", "conditions": [ "default desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce" ], "result": "issues" }, { "id": "categories", "description": "Category index/listing archetype and navigation density.", "url": "https://xhsocial.com/categories", "conditions": [ "desktop" ], "result": "issues" }, { "id": "signup", "description": "Primary account creation path, consent disclosure, autofill and error handling.", "url": "https://xhsocial.com/signup?source=menuSignup", "conditions": [ "desktop", "empty submission" ], "result": "issues" }, { "id": "video-detail", "description": "Primary watch-detail journey from a current homepage card; metadata succeeded but one navigation returned 503.", "url": "https://xhsocial.com/videos/horny-milf-cory-chase-seduces-virgin-step-nephew-and-fucks-his-monster-cock-xhAEjYy", "conditions": [ "desktop" ], "result": "failed" }, { "id": "not-found", "description": "Unknown-route HTTP/recovery state.", "url": "https://xhsocial.com/this-route-does-not-exist-audit", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "confidence": "high", "summary": "Fixed dark theme ignores the user’s colour-scheme preference", "evidence": "The dark-emulated screenshot is visually identical to the default dark UI, but the document probe reports computed color-scheme: normal rather than declaring supported schemes.", "artifacts": [ "evidence/home-dark.png", "evidence/home-probe.json" ], "suggestedFix": "Declare color-scheme at document level and use preference-aware tokens with light-dark() or prefers-color-scheme.", "effort": "small", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F02", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "confidence": "high", "summary": "Infinite shimmer continues under reduced-motion", "evidence": "The reduced-motion probe found eight running shimmer animations with 2,000 ms duration and infinite iterations, and found zero prefers-reduced-motion rules.", "artifacts": [ "evidence/reduced-motion.json" ], "suggestedFix": "Disable non-essential shimmer and preview motion under prefers-reduced-motion: reduce.", "effort": "small", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F03", "severity": "low", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "confidence": "high", "summary": "Route and state changes have no transition treatment", "evidence": "The modern CSS probe found zero view-transition rules on a multi-route interactive site, while the browser API is available. Navigation and consent state swap abruptly.", "artifacts": [ "evidence/modern-css-probe.json", "evidence/home.png" ], "suggestedFix": "Use same-document or cross-document View Transitions for meaningful route/state changes, with reduced-motion handling.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F04", "severity": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "confidence": "high", "summary": "Cookie consent obscures the primary content and lacks dialog semantics", "evidence": "First-load screenshots on home, categories and 404 show a large centered consent layer obscuring the page. DOM probes found no dialog, popover, or role=dialog despite modal presentation.", "artifacts": [ "evidence/home.png", "evidence/categories.png", "evidence/not-found.png", "evidence/home-probe.json" ], "suggestedFix": "Use a semantic dialog with focus management and a compact, non-obscuring consent design; retain equal Accept and Reject actions.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F05", "severity": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "confidence": "high", "summary": "Desktop-width layout overflows a 360 px viewport", "evidence": "The 360x800 layout capture measured scrollWidth 1024 px against a 360 px visual viewport, 664 px horizontal overflow; the screenshot clips the desktop sidebar and content.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile-reject.png" ], "suggestedFix": "Replace fixed desktop widths with intrinsic/fluid layout, and select a genuinely mobile template from viewport capabilities rather than a brittle signal.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F06", "severity": "low", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "confidence": "high", "summary": "Components do not adapt at container level", "evidence": "The modern CSS probe found zero container-query rules, while the listing/sidebar composition is reused across widths and visibly clips at 360 px.", "artifacts": [ "evidence/modern-css-probe.json", "evidence/home-mobile-reject.png" ], "suggestedFix": "Introduce container-type on reusable regions and @container rules for card grids, nav and sidebars.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F07", "severity": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "primary user journey task completion", "confidence": "high", "summary": "Primary watch journey intermittently fails with a raw 503", "evidence": "Following a current home-page video URL produced an unstyled nginx “503 Service Temporarily Unavailable” screenshot. A later metadata probe succeeded, showing an intermittent backend/runtime failure rather than a dead link.", "artifacts": [ "evidence/video-detail-valid.png", "evidence/video-detail-valid-probe.json" ], "suggestedFix": "Harden the detail route and CDN/origin path, then render a branded retry state instead of the raw server error.", "effort": "large", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F08", "severity": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "confidence": "high", "summary": "Mobile lab LCP misses the good threshold", "evidence": "Lighthouse measured LCP 3.2 s on mobile (performance 0.89), while the direct trace measured 1.52 s in a separate desktop-like run; the slower representative condition exceeds the 2.5 s good threshold.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Prioritise the LCP asset and reduce critical script/style work, then verify on mobile throttling.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F09", "severity": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "identify-heavy-scripts", "confidence": "high", "summary": "The homepage ships a heavy script and third-party dependency graph", "evidence": "HAR recorded 141 requests and 1.79 MB transferred; 61 scripts account for 988 KB, the largest bundle is 400 KB, and 113 requests/1.60 MB are cross-origin.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trace-summary.json" ], "suggestedFix": "Split and conditionally load non-critical bundles, defer Google sign-in until needed, and set a request/third-party budget.", "effort": "large", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F10", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "confidence": "high", "summary": "Interactive names, roles and list semantics are broken", "evidence": "Lighthouse found an unnamed button, label/content name mismatches on video links, an li with role=button, and non-li direct children inside a ul; accessibility score was 0.75.", "artifacts": [ "evidence/lighthouse-home.json" ], "suggestedFix": "Use native links/buttons with matching accessible names and valid list structure; remove redundant conflicting roles.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F11", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "confidence": "high", "summary": "Important text fails minimum contrast", "evidence": "Lighthouse measured the age-verification banner at 2.15:1 and 1.75:1, video-view text at 3.29:1, and also found a link distinguishable only by near-identical colour.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-contrast.png" ], "suggestedFix": "Raise foreground/background contrast to WCAG AA and add a non-colour link affordance.", "effort": "small", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F12", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "confidence": "high", "summary": "Zoom is disabled and some touch targets are undersized", "evidence": "Lighthouse found user-scalable=no in the effective mobile viewport and 20 px-high/overlapping targets, failing its meta-viewport and target-size audits.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-mobile-reject.png" ], "suggestedFix": "Remove user-scalable=no, permit unrestricted zoom, and provide at least 24x24 CSS px targets with spacing (prefer 44x44).", "effort": "small", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F13", "severity": "medium", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "confidence": "high", "summary": "Image delivery wastes bytes and risks instability", "evidence": "The image audit found 29/36 images without width and height, 13 oversized images, 8 below-fold images not lazy-loaded, and 15 legacy-format detections.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Reserve dimensions, generate right-sized srcset candidates, lazy-load below-fold media and serve modern formats consistently.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F14", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "confidence": "high", "summary": "Localized indexing signals are incomplete", "evidence": "The public site exposes many locale subdomains, but the probe found zero hreflang links; /sitemap.xml returned an empty body. The canonical points to the xhamster.com alias, so crawlers lack a complete localized URL map on this host.", "artifacts": [ "evidence/recon.json", "evidence/document-probe.json", "evidence/sitemap.xml", "evidence/robots.txt" ], "suggestedFix": "Publish a valid sitemap and reciprocal hreflang links for localized variants; keep canonical/host strategy internally consistent.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F15", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "confidence": "high", "summary": "Video detail lacks structured VideoObject data", "evidence": "The valid video-detail probe found comprehensive Open Graph/Twitter metadata but zero JSON-LD blocks for a rich video entity.", "artifacts": [ "evidence/video-detail-valid-probe.json" ], "suggestedFix": "Add accurate schema.org VideoObject JSON-LD matching the visible title, thumbnail, duration and canonical URL.", "effort": "small", "pathId": "video-detail", "url": "https://xhsocial.com/videos/horny-milf-cory-chase-seduces-virgin-step-nephew-and-fucks-his-monster-cock-xhAEjYy" }, { "id": "F16", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "confidence": "high", "summary": "Browser security policy and cookie flags are weak", "evidence": "Headers show CSP limited to frame-ancestors, missing X-Content-Type-Options and Referrer-Policy, while four of five cookies lack Secure and several use SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Deploy an enforcing script/style CSP, nosniff and a privacy-preserving Referrer-Policy; mark HTTPS cookies Secure and use the narrowest SameSite value.", "effort": "medium", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F17", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "confidence": "high", "summary": "Third-party activity starts before a consent choice", "evidence": "The initial HAR, captured while the cookie prompt was still present, includes Google Tag Manager and Google Identity; 113/141 requests and 1.60/1.79 MB were cross-origin.", "artifacts": [ "evidence/home.png", "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Gate optional analytics/identity code behind consent or explicit sign-in intent and minimise cross-origin requests before choice.", "effort": "large", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F18", "severity": "medium", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "confidence": "high", "summary": "Signup exposes federated/password options but no phishing-resistant path", "evidence": "The signup path offers Google, X and email/password. Probes found no WebAuthn/passkey affordance or navigator.credentials flow on the representative auth surface.", "artifacts": [ "evidence/signup-probe.json", "evidence/signup-email-probe.json" ], "suggestedFix": "Offer passkey creation/sign-in alongside federated fallback and request credentials only from the explicit auth flow.", "effort": "large", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F19", "severity": "medium", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "conditional-async-dependencies", "confidence": "high", "summary": "App-like service has a manifest but no active offline support", "evidence": "A manifest is linked, but the loaded page had no controlling service worker. The video platform is app-like and its primary detail request also demonstrated a transient 503.", "artifacts": [ "evidence/manifest.webmanifest", "evidence/home-probe.json", "evidence/video-detail-valid.png" ], "suggestedFix": "Register a narrowly scoped service worker and provide cached shell/offline/retry states for navigation and key metadata.", "effort": "large", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F20", "severity": "medium", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "confidence": "high", "summary": "Localized variants are not backed by robust bidi/layout signals", "evidence": "The page links dozens of language subdomains, but exposes no hreflang links and the CSS probe counted 371 physical left/right declarations versus 19 logical-property occurrences.", "artifacts": [ "evidence/recon.json", "evidence/document-probe.json" ], "suggestedFix": "Publish lang/hreflang consistently and migrate reusable layout spacing/positioning to logical properties; verify RTL variants.", "effort": "large", "pathId": "home", "url": "https://xhsocial.com/" }, { "id": "F21", "severity": "high", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "confidence": "high", "summary": "Empty signup submission provides no actionable error state", "evidence": "After opening email signup and triggering submit with empty fields, the probe found no invalid elements, no role=alert messages and no visible actionable validation state.", "artifacts": [ "evidence/signup-invalid-probe.json", "evidence/signup-email-probe.json" ], "suggestedFix": "Use required/input types, validate after interaction, set aria-invalid only when appropriate, and announce clear field-specific errors.", "effort": "small", "pathId": "signup", "url": "https://xhsocial.com/signup?source=menuSignup" }, { "id": "F22", "severity": "medium", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-up-form", "confidence": "high", "summary": "Signup disables email autofill", "evidence": "The email signup probe reports autocomplete=off on both email controls; only the password field uses new-password.", "artifacts": [ "evidence/signup-email-probe.json" ], "suggestedFix": "Use type=email and autocomplete=email on the single email field, retain autocomplete=new-password, and remove duplicate hidden/text email controls from focus/AT.", "effort": "small", "pathId": "signup", "url": "https://xhsocial.com/signup?source=menuSignup" } ], "taskList": [ { "id": "T01", "title": "Restore reliable video-detail delivery and add branded retry handling", "priority": 1, "findingIds": [ "F07" ], "guidanceId": "primary user journey task completion", "status": "open" }, { "id": "T02", "title": "Fix mobile overflow, zoom and target sizing", "priority": 2, "findingIds": [ "F05", "F06", "F12" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T03", "title": "Harden CSP, cookie flags and browser security headers", "priority": 3, "findingIds": [ "F16" ], "guidanceId": "security", "status": "open" }, { "id": "T04", "title": "Gate optional Google/analytics code until consent or explicit auth intent", "priority": 4, "findingIds": [ "F17" ], "guidanceId": "privacy", "status": "open" }, { "id": "T05", "title": "Repair accessible names, roles, list semantics and contrast", "priority": 5, "findingIds": [ "F10", "F11" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T06", "title": "Make consent semantic and less obstructive", "priority": 6, "findingIds": [ "F04" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T07", "title": "Reduce script/third-party weight and improve LCP", "priority": 7, "findingIds": [ "F08", "F09" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T08", "title": "Fix image sizing, responsive delivery and lazy loading", "priority": 8, "findingIds": [ "F13" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T09", "title": "Add humane signup validation and autofill tokens", "priority": 9, "findingIds": [ "F21", "F22" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T10", "title": "Respect colour and reduced-motion preferences", "priority": 10, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T11", "title": "Complete localized and rich-video metadata", "priority": 11, "findingIds": [ "F14", "F15", "F20" ], "guidanceId": "html", "status": "open" }, { "id": "T12", "title": "Add passkeys and resilient offline/retry support", "priority": 12, "findingIds": [ "F18", "F19" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T13", "title": "Add meaningful route transitions", "priority": 13, "findingIds": [ "F03" ], "guidanceId": "same-document-transitions", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T13-06-48-472Z" }