{ "url": "https://xoso.com.vn", "auditedAt": "2026-07-22T03:00:47.509Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete representative audit of four public templates plus the 404 recovery path.", "page": { "appType": "mpa", "framework": "server-rendered MPA with third-party advertising/consent scripts", "notes": "Public Vietnamese lottery results, statistics and editorial site. Not covered: authenticated account internals, every province/day variant, purchase/subscription flows (none on selected public journey), and exhaustive offline simulation; shared templates were de-duplicated." }, "evidenceUsed": [ "screenshot", "DOM/evaluate probes", "layout metrics", "DevTools trace", "HAR", "Lighthouse", "discoverability/raw HTML", "headers", "cookies", "trackers", "secrets", "images", "heap summaries", "robots/sitemap/manifest fetch", "HTTP 404 walkthrough", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage first viewport with consent wall.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage at 360x800 with consent wall.", "condition": "viewport: 360x800", "findingIds": [ "F-04" ] }, { "type": "screenshot", "path": "evidence/results-mobile.png", "caption": "Results template at 390x844 with consent wall.", "condition": "viewport: 390x844", "findingIds": [] }, { "type": "screenshot", "path": "evidence/stats-mobile.png", "caption": "Statistics form at 390x844 with consent wall.", "condition": "viewport: 390x844", "findingIds": [] }, { "type": "screenshot", "path": "evidence/article-mobile.png", "caption": "Article first viewport at 390x844.", "condition": "viewport: 390x844", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark-reduced.png", "caption": "Homepage under dark and reduced-motion preferences; UI remains light.", "condition": "prefers-color-scheme: dark, prefers-reduced-motion: reduce", "findingIds": [ "F-01" ] }, { "type": "screenshot", "path": "evidence/article-forced-colors.png", "caption": "Article and consent UI remain legible in forced colors.", "condition": "forced-colors: active, prefers-contrast: more", "findingIds": [] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "Mobile layout metrics for homepage.", "findingIds": [ "F-03" ] }, { "type": "layout", "path": "evidence/results-layout-mobile.json", "caption": "Mobile layout metrics for results.", "findingIds": [] }, { "type": "layout", "path": "evidence/stats-layout-mobile.json", "caption": "Mobile layout metrics for statistics.", "findingIds": [] }, { "type": "layout", "path": "evidence/article-layout-mobile.json", "caption": "Article layout metrics report 106px horizontal overflow and two long tasks.", "findingIds": [ "F-07", "F-16" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools performance trace for homepage.", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Homepage trace summary: LCP 3.68s in trace.", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "Homepage HAR with 55 requests and 2.44MB transferred.", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "HAR summary: 51 third-party requests and 2.41MB third-party bytes.", "findingIds": [ "F-12", "F-27", "F-28" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "Mobile Lighthouse report for homepage.", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-home-summary.json", "caption": "Compact homepage Lighthouse summary.", "findingIds": [ "F-10", "F-17", "F-20", "F-23" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-article.json", "caption": "Mobile Lighthouse report for article.", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-article-summary.json", "caption": "Compact article Lighthouse summary.", "findingIds": [ "F-11", "F-13", "F-14", "F-19" ] }, { "type": "discoverability", "path": "evidence/discoverability-home.json", "caption": "Homepage raw/rendered crawlability comparison.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-home-rendered.png", "caption": "Homepage browser-rendered view.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-home-crawler.png", "caption": "Homepage crawler/no-JS view.", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability-article.json", "caption": "Article raw/rendered crawlability comparison.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-article-crawler.png", "caption": "Article crawler/no-JS view.", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response-header audit.", "findingIds": [ "F-21", "F-24" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie flags and lifetime audit.", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party tracker inventory.", "findingIds": [ "F-06", "F-22" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan; only expected public Firebase key found.", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "Image dimensions, loading and format audit.", "findingIds": [ "F-18", "F-26" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Baseline readable heap summary.", "findingIds": [ "F-29" ] }, { "type": "heap", "path": "evidence/heap-post-valid.heapsnapshot", "caption": "Heap summary after ten menu-toggle attempts.", "findingIds": [] }, { "type": "other", "path": "evidence/preferences-probe.json", "caption": "Dark/reduced-motion and modern CSS feature probe.", "findingIds": [ "F-02" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM and computed-style capture.", "findingIds": [] }, { "type": "dom", "path": "evidence/recon.json", "caption": "Homepage route, heading, metadata, form and dialog recon.", "findingIds": [ "F-05" ] }, { "type": "other", "path": "evidence/article-probe.json", "caption": "Article semantics, targets, focus and CSS probe.", "findingIds": [ "F-08", "F-09", "F-15" ] }, { "type": "other", "path": "evidence/stats-form-probe.json", "caption": "Statistics form labels and control probe.", "findingIds": [ "F-25" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Fetched robots.txt.", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Fetched sitemap.xml.", "findingIds": [] }, { "type": "other", "path": "evidence/manifest.json", "caption": "Fetched web app manifest.", "findingIds": [] }, { "type": "other", "path": "evidence/sw-registration.json", "caption": "Service-worker registration probe returned an empty list.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "Purposeful 404 response with home recovery link.", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The dark/reduced screenshot remains a white/cream light theme; the probe reports colorScheme \"normal\" and no authored prefers-color-scheme rule.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark-reduced.png" ], "findingIds": [ "F-01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Emulated reduced motion and inspected active animations", "evidence": "The reduced-motion probe reported zero active animations; no auto-advance or essential animated flow was present.", "pathIds": [ "article" ], "artifacts": [ "evidence/preferences-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Captured forced-colors screenshot", "evidence": "Text, links, controls and consent actions remain visibly differentiated under forced-colors active.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The CSS probe found no authored view-transition rule or startViewTransition use across this multi-page site.", "pathIds": [ "home" ], "artifacts": [ "evidence/preferences-probe.json" ], "findingIds": [ "F-02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Inspected CSS and page behavior", "evidence": "No parallax, scrollytelling, reveal animation or other scroll-linked motion exists to implement declaratively.", "reason": "No parallax, scrollytelling, reveal animation or other scroll-linked motion exists to implement declaratively." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Visual and CSS/pointer interaction inspection", "evidence": "Core pages rely on native page scrolling and links; no custom swipe/pointer interaction was found fighting platform behavior.", "pathIds": [ "home", "results", "article" ], "artifacts": [ "evidence/article-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The 8,518px homepage and 5,816px article use fixed shared chrome, but the CSS probe found no scroll-state or scroll-timeline behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json" ], "findingIds": [ "F-03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Inspected representative overlays and controls", "evidence": "No tooltip/popover/menu requiring element-relative anchor positioning was present on the audited core paths.", "reason": "No tooltip/popover/menu requiring element-relative anchor positioning was present on the audited core paths." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Reviewed navigation, breadcrumbs and first viewports", "evidence": "Article breadcrumbs, descriptive links, red active navigation and direct result links give users visible orientation.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/article-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Desktop, homepage mobile, results, and statistics screenshots all show a modal consent wall covering the lottery results or form before interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ], "findingIds": [ "F-04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "DOM recon found multiple `div[role=dialog]` consent surfaces rather than native ``, while the modal injects hundreds of vendor headings into the document.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json" ], "findingIds": [ "F-05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The consent interface lists 210 partners and the tracker probe sees 17 third-party origins; article Lighthouse also loads in-article advertising controls around the content.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json" ], "findingIds": [ "F-06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "At a 390px visual viewport, article layout metrics report scrollWidth/client layout width 496px and horizontalOverflowPx 106.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-layout-mobile.json" ], "findingIds": [ "F-07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The article CSS probe found no authored `@container` rule despite cards, sidebars and result tables being reused across narrow and wide regions.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-probe.json" ], "findingIds": [ "F-08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The focused first link computed to `outline-style:none`; the probe also found multiple visible targets under 24px high.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-probe.json" ], "findingIds": [ "F-09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Reviewed first viewports and heading/link hierarchy", "evidence": "The H1 and result tables immediately identify current three-region lottery results, with direct regional result links.", "pathIds": [ "home", "results" ], "artifacts": [ "evidence/discoverability-home-crawler.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Walked home to results and statistics surfaces", "evidence": "Current results are readable without sign-in and regional/history links use real destinations; the primary lookup does not dead-end.", "pathIds": [ "home", "results", "stats" ], "artifacts": [ "evidence/results-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Requested an unknown route and inspected recovery state", "evidence": "The server returns HTTP 404 with a clear bilingual not-found message, home link and alternative region links.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Mobile Lighthouse measured LCP 11.1s, TTI 11.5s and performance 67; the independent trace measured LCP 3.68s.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-10" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout observers and Lighthouse CLS", "evidence": "CLS was 0.013 home, 0.060 results, 0.028 stats and 0.063 article, all within the good threshold.", "pathIds": [ "home", "results", "stats", "article" ], "artifacts": [ "evidence/article-layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Article Lighthouse measured 530ms TBT and 28.6s TTI; mobile layout observed 90ms and 52ms long tasks.", "pathIds": [ "article" ], "artifacts": [ "evidence/lighthouse-article-summary.json" ], "findingIds": [ "F-11" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "HAR recorded 2.44MB, including 2.21MB of scripts; 2.41MB came from third parties and a 414KB Prebid script was uncompressed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-12" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Lighthouse estimated 624KiB unused JS on home and 2,034KiB on the article, including duplicated gtag/ad stacks.", "pathIds": [ "article" ], "artifacts": [ "evidence/lighthouse-article-summary.json" ], "findingIds": [ "F-13" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Article Lighthouse found six ad links with no discernible name; the statistics probe found date/select/button controls with no associated labels.", "pathIds": [ "article" ], "artifacts": [ "evidence/lighthouse-article-summary.json" ], "findingIds": [ "F-14" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "medium", "method": "Lighthouse accessibility plus forced-colors visual review", "evidence": "Lighthouse accessibility scored 100 on home and 97 on article without a reported contrast failure; forced colors remains readable.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/article-forced-colors.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The page probe found no visible outline on the first focused link and consent markup injects several H1s plus hundreds of vendor H2s into the document.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-probe.json" ], "findingIds": [ "F-15" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Mobile screenshot review", "evidence": "Article body uses large black text on white, clear hierarchy and comfortable line spacing in the visible reading column.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The article has 106px horizontal overflow at 390px, and the interaction probe found multiple targets under 24px high.", "pathIds": [ "article" ], "artifacts": [ "evidence/article-layout-mobile.json" ], "findingIds": [ "F-16" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Lighthouse reported “Not signed in with the identity provider” as a console error on home and article.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-17" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The image primitive found 21 of 25 images without width/height; 10 below-fold images were not lazy-loaded.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-18" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Lighthouse failed notification-on-start on both representative pages; article ads also triggered a deprecated Shared Storage warning.", "pathIds": [ "article" ], "artifacts": [ "evidence/lighthouse-article-summary.json" ], "findingIds": [ "F-19" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM and Lighthouse SEO inspection", "evidence": "Home and article have descriptive unique titles and meta descriptions; Lighthouse passes both title and description audits.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Lighthouse found `a#curr_living_btn` labelled “➜ Xem ngay” with `href=\"javascript:void(0)\"`.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-20" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "Fetched robots/sitemap and inspected canonical/status", "evidence": "Both pages return 200, homepage has canonical URL, robots is valid and sitemap.xml is available without accidental noindex.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "Inspected JSON-LD and social metadata", "evidence": "Homepage exposes Organization and WebSite JSON-LD plus Open Graph/Twitter title, description and image matching visible content.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "HTTPS is used, but headers lack CSP, HSTS and nosniff; all seven observed first-party cookies lacked Secure and used SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F-21" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Tracker evidence found 17 third-party origins and six known trackers; HAR attributes 51/55 requests and 2.41/2.44MB to third parties before a consent choice.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json" ], "findingIds": [ "F-22" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Lighthouse identified a notification permission request on page load. The sign-in surface exists, but no passkey flow was exposed in the audited public path.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-23" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Header audit found no HSTS, CSP/frame-ancestors, nosniff, Referrer-Policy or Permissions-Policy; only X-Frame-Options SAMEORIGIN was present.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F-24" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Compared raw HTML, crawler screenshot and rendered DOM", "evidence": "Core results and article text are server-rendered without JS; home raw/rendered token coverage is 72% and neither page is a JS shell.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/discoverability-home.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Exercised representative pages and edge states", "evidence": "Results, statistics, article and 404 pages render useful content; no clipped core overlay/menu or blank runtime state was observed.", "pathIds": [ "results", "stats", "article", "not-found" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Inspected manifest and service-worker registration", "evidence": "This public results/content site is not a long-lived app requiring offline use; a manifest exists but no service-worker registration was found.", "reason": "This public results/content site is not a long-lived app requiring offline use; a manifest exists but no service-worker registration was found." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Requested a nonexistent path", "evidence": "The server returns a real 404 and a useful recovery page with a homepage link and suggested result destinations.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "DOM language and layout inspection", "evidence": "The document declares `lang=\"vi\"`; Vietnamese text renders in the expected LTR reading order.", "pathIds": [ "home", "article" ], "artifacts": [ "evidence/home-dom.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Reviewed site scope and rendered data", "evidence": "The service deliberately targets Vietnamese lottery data in one locale and exposes no currency or user-selectable locale requiring cross-locale formatting.", "reason": "The service deliberately targets Vietnamese lottery data in one locale and exposes no currency or user-selectable locale requiring cross-locale formatting." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Reviewed rendered date/time use", "evidence": "Published draw/article dates are local Vietnamese dates; no cross-time-zone scheduling or user-entered time flow is present.", "reason": "Published draw/article dates are local Vietnamese dates; no cross-time-zone scheduling or user-entered time flow is present." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Reviewed consent UI and core flow", "evidence": "Consent and Do not consent are equally prominent and the public result flow does not force account creation, purchase or continuity.", "pathIds": [ "home", "results" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "medium", "method": "Inspected statistics and login forms", "evidence": "The audited public statistics flow has no required free-form submission or validation error state; login was outside the selected public core flow.", "reason": "The audited public statistics flow has no required free-form submission or validation error state; login was outside the selected public core flow." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "The statistics form probe found an unlabeled text date, unlabeled select and button, all with empty autocomplete values.", "pathIds": [ "stats" ], "artifacts": [ "evidence/stats-form-probe.json" ], "findingIds": [ "F-25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative paths and navigation", "evidence": "No checkout, subscription, payment, account-management or sensitive account action is part of the audited public lottery lookup journey.", "reason": "No checkout, subscription, payment, account-management or sensitive account action is part of the audited public lottery lookup journey." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Image evidence reports 21 missing dimensions, 10 below-fold images not lazy-loaded and two images without responsive sources.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-26" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "HAR shows 51 third-party requests and 2.21MB of scripts for a mostly text/table page; Lighthouse estimates up to 2MB unused JS on the article.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-27" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "2.41MB of 2.44MB transferred on home was third party; top costs were tag manager, Prebid, ads, MGID and consent code.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-28" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Inspected public purpose and agent APIs", "evidence": "The site exposes public informational content rather than an agent-facing transaction/tool surface; WebMCP is not necessary for its declared experience.", "reason": "The site exposes public informational content rather than an agent-facing transaction/tool surface; WebMCP is not necessary for its declared experience." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Inspected functionality and built-in AI surfaces", "evidence": "No summarization, generation or translation task is offered where on-device inference would be an expected product capability.", "reason": "No summarization, generation or translation task is offered where on-device inference would be an expected product capability." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "low", "method": "Compared baseline and post-interaction heap summaries after ten menu-toggle attempts", "evidence": "Self size changed from 31.93MB to 32.72MB across separate fresh sessions; this does not establish unbounded retained growth, but confidence is low because third-party load variance dominates.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-valid.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Direct artifact and probe review", "evidence": "Baseline heap summary contains 575,957 nodes and 31.9MB self size, while the DOM probe counts 6,798 elements; third-party ad/consent code dominates the complexity.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "findingIds": [ "F-29" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Compared heap constructor summaries and sampled inline listeners", "evidence": "Neither heap top-constructor list contains Detached* nodes; the runtime probe found one inline listener-bearing element and no evidence of accumulating detached DOM.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-04", "F-05", "F-06" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-07", "F-08", "F-09" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-10", "F-11", "F-12", "F-13" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-14", "F-15", "F-16" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-17", "F-18", "F-19" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-20" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-21", "F-22", "F-23", "F-24" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-25" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-26", "F-27", "F-28" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "The site has no applicable agent-facing capability for this contextual principle." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F-29" ] } ], "paths": [ { "id": "home", "description": "Homepage and current-results overview; represents the primary task and shared site chrome.", "url": "https://xoso.com.vn/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce" ], "result": "issues" }, { "id": "results", "description": "Northern lottery result listing; represents the core results template.", "url": "https://xoso.com.vn/xo-so-mien-bac/xsmb-p1.html", "conditions": [ "viewport: 390x844" ], "result": "issues" }, { "id": "stats", "description": "Loto statistics tool; represents the primary form/interactive analysis journey.", "url": "https://xoso.com.vn/thong-ke-lo-gan.html", "conditions": [ "viewport: 390x844", "form inspection" ], "result": "issues" }, { "id": "article", "description": "Analysis article; represents editorial content, ad embedding, crawlability and long-form mobile layout.", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "conditions": [ "viewport: 390x844", "forced-colors: active", "no JavaScript crawler" ], "result": "issues" }, { "id": "not-found", "description": "Unknown URL; exercises HTTP failure messaging and recovery.", "url": "https://xoso.com.vn/this-page-does-not-exist-web-uplift.html", "conditions": [ "viewport: 390x844" ], "result": "pass" } ], "findings": [ { "id": "F-04", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Consent wall obscures the primary content on first load", "evidence": "Desktop, homepage mobile, results, and statistics screenshots all show a modal consent wall covering the lottery results or form before interaction.", "artifacts": [ "evidence/home-mobile.png" ], "suggestedFix": "Use a compact, non-blocking consent surface where legally possible; keep equal accept/reject controls and preserve access to core content.", "effort": "large" }, { "id": "F-07", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Article template overflows mobile by 106px", "evidence": "At a 390px visual viewport, article layout metrics report scrollWidth/client layout width 496px and horizontalOverflowPx 106.", "artifacts": [ "evidence/article-layout-mobile.json" ], "suggestedFix": "Remove the minimum/fixed width causing 496px layout; use `max-inline-size:100%`, fluid tables/media and wrapping.", "effort": "large" }, { "id": "F-10", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Homepage LCP is far outside the good range", "evidence": "Mobile Lighthouse measured LCP 11.1s, TTI 11.5s and performance 67; the independent trace measured LCP 3.68s.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Prioritize the LCP content, delay consent/ad scripts until needed, and retest under mobile throttling.", "effort": "large" }, { "id": "F-11", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Article scripting blocks interaction", "evidence": "Article Lighthouse measured 530ms TBT and 28.6s TTI; mobile layout observed 90ms and 52ms long tasks.", "artifacts": [ "evidence/lighthouse-article-summary.json" ], "suggestedFix": "Break up first-party work and defer or remove advertising/video scripts until the associated slot approaches the viewport.", "effort": "large" }, { "id": "F-12", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party script delivery dominates the load", "evidence": "HAR recorded 2.44MB, including 2.21MB of scripts; 2.41MB came from third parties and a 414KB Prebid script was uncompressed.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Load only essential critical resources, compress all text, gate ad stacks behind consent/visibility and remove duplicate analytics tags.", "effort": "large" }, { "id": "F-13", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Large amounts of shipped JavaScript are unused", "evidence": "Lighthouse estimated 624KiB unused JS on home and 2,034KiB on the article, including duplicated gtag/ad stacks.", "artifacts": [ "evidence/lighthouse-article-summary.json" ], "suggestedFix": "Remove duplicate tags and route/slot-condition ad dependencies so code is fetched only where it adds value.", "effort": "large" }, { "id": "F-16", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "severity": "high", "confidence": "high", "summary": "Mobile reflow and target sizing fail on the article", "evidence": "The article has 106px horizontal overflow at 390px, and the interaction probe found multiple targets under 24px high.", "artifacts": [ "evidence/article-layout-mobile.json" ], "suggestedFix": "Fix narrow reflow, preserve user zoom, and enlarge target hit areas without relying on text glyph dimensions.", "effort": "large" }, { "id": "F-19", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "The page requests notifications on load", "evidence": "Lighthouse failed notification-on-start on both representative pages; article ads also triggered a deprecated Shared Storage warning.", "artifacts": [ "evidence/lighthouse-article-summary.json" ], "suggestedFix": "Ask for notifications only after an explicit user action and update or remove third-party code using deprecated APIs.", "effort": "large" }, { "id": "F-21", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Core transport defenses and cookie flags are missing", "evidence": "HTTPS is used, but headers lack CSP, HSTS and nosniff; all seven observed first-party cookies lacked Secure and used SameSite=None.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Add HSTS, a restrictive CSP, nosniff, Referrer-Policy and secure appropriate SameSite cookie attributes.", "effort": "large" }, { "id": "F-22", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "The initial page has an excessive tracking footprint", "evidence": "Tracker evidence found 17 third-party origins and six known trackers; HAR attributes 51/55 requests and 2.41/2.44MB to third parties before a consent choice.", "artifacts": [ "evidence/trackers.json" ], "suggestedFix": "Block non-essential analytics/ad requests until consent, consolidate vendors, minimize identifiers and batch essential measurement.", "effort": "large" }, { "id": "F-23", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Notification permission is requested out of context", "evidence": "Lighthouse identified a notification permission request on page load. The sign-in surface exists, but no passkey flow was exposed in the audited public path.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Move notification requests behind a clearly explained user action; for account flows, offer WebAuthn/passkeys where practical.", "effort": "large" }, { "id": "F-24", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Browser-enforced defensive policies are incomplete", "evidence": "Header audit found no HSTS, CSP/frame-ancestors, nosniff, Referrer-Policy or Permissions-Policy; only X-Frame-Options SAMEORIGIN was present.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Deploy HSTS and a nonce/hash CSP including frame-ancestors, plus nosniff, strict referrer and least-privilege permissions policies.", "effort": "large" }, { "id": "F-27", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Background advertising work is disproportionate to the core page", "evidence": "HAR shows 51 third-party requests and 2.21MB of scripts for a mostly text/table page; Lighthouse estimates up to 2MB unused JS on the article.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Do not initialize ad auctions, analytics and video players until consent and viewport/user intent require them.", "effort": "large" }, { "id": "F-28", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party bytes overwhelm first-party content", "evidence": "2.41MB of 2.44MB transferred on home was third party; top costs were tag manager, Prebid, ads, MGID and consent code.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Set a third-party byte/request budget, remove redundant vendors, and defer media/ad stacks below the fold.", "effort": "large" }, { "id": "F-01", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Dark preference is ignored", "evidence": "The dark/reduced screenshot remains a white/cream light theme; the probe reports colorScheme \"normal\" and no authored prefers-color-scheme rule.", "artifacts": [ "evidence/home-dark-reduced.png" ], "suggestedFix": "Add `color-scheme: light dark` and theme surfaces with `light-dark()` or a prefers-color-scheme media query.", "effort": "medium" }, { "id": "F-05", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Consent UI is custom dialog chrome", "evidence": "DOM recon found multiple `div[role=dialog]` consent surfaces rather than native ``, while the modal injects hundreds of vendor headings into the document.", "artifacts": [ "evidence/recon.json" ], "suggestedFix": "Use a real modal `` with `showModal()`, inert background behavior, focus restoration and a clear close/reject action.", "effort": "medium" }, { "id": "F-06", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "defer-rendering-heavy-content", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Advertising and consent chrome compete with content", "evidence": "The consent interface lists 210 partners and the tracker probe sees 17 third-party origins; article Lighthouse also loads in-article advertising controls around the content.", "artifacts": [ "evidence/trackers.json" ], "suggestedFix": "Reduce ad slots and vendor chrome, especially above and inside the primary result/article content.", "effort": "medium" }, { "id": "F-08", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "severity": "medium", "confidence": "high", "summary": "Shared components only use viewport-level adaptation", "evidence": "The article CSS probe found no authored `@container` rule despite cards, sidebars and result tables being reused across narrow and wide regions.", "artifacts": [ "evidence/article-probe.json" ], "suggestedFix": "Declare container contexts for reusable result cards/forms and adapt columns, typography and controls with size container queries.", "effort": "medium" }, { "id": "F-09", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Focus and target sizing are inconsistent", "evidence": "The focused first link computed to `outline-style:none`; the probe also found multiple visible targets under 24px high.", "artifacts": [ "evidence/article-probe.json" ], "suggestedFix": "Provide a strong `:focus-visible` ring and ensure interactive targets are at least 24px, preferably 44px for primary touch actions.", "effort": "medium" }, { "id": "F-14", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Some article and statistics controls lack accessible names", "evidence": "Article Lighthouse found six ad links with no discernible name; the statistics probe found date/select/button controls with no associated labels.", "artifacts": [ "evidence/lighthouse-article-summary.json" ], "suggestedFix": "Give every control a programmatic label and require ad creatives to expose meaningful link names or remove them from the tab order.", "effort": "medium" }, { "id": "F-15", "pathId": "article", "url": "https://xoso.com.vn/thong-ke-kqxs/thong-ke-kep-xsmb-22-7-2026-407-150185.html", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Injected consent structure and focus styling weaken navigation", "evidence": "The page probe found no visible outline on the first focused link and consent markup injects several H1s plus hundreds of vendor H2s into the document.", "artifacts": [ "evidence/article-probe.json" ], "suggestedFix": "Keep consent headings inside a correctly labelled dialog without polluting page hierarchy, and add visible `:focus-visible` styles.", "effort": "medium" }, { "id": "F-18", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Most images lack intrinsic dimensions", "evidence": "The image primitive found 21 of 25 images without width/height; 10 below-fold images were not lazy-loaded.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Set intrinsic width/height or aspect-ratio and use native lazy loading for below-fold content images.", "effort": "medium" }, { "id": "F-20", "pathId": "home", "url": "https://xoso.com.vn/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "A visible action uses a non-crawlable JavaScript URL", "evidence": "Lighthouse found `a#curr_living_btn` labelled “➜ Xem ngay” with `href=\"javascript:void(0)\"`.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Use a real destination URL for navigation, or a `