{ "url": "https://www.pinterest.com", "auditedAt": "2026-07-23T05:38:33.985Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of four representative public archetypes. Authenticated feed, pin creation, checkout and account settings were not covered because no test account or source was supplied.", "page": { "appType": "hybrid", "framework": "React-like client application with substantial server HTML on listing archetypes", "notes": "www redirects by locale to uk.pinterest.com in this environment. Home, ideas, shopping and login were sampled." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "discoverability", "trace", "har", "lighthouse", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "curl robots/sitemap", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark.png", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom.json", "findingIds": [ "F01", "F04" ] }, { "type": "other", "path": "evidence/home-modern-css-reduced-motion.json", "caption": "home modern css reduced motion.json", "findingIds": [ "F02" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop.png", "findingIds": [ "F03", "F09" ] }, { "type": "screenshot", "path": "evidence/shopping-desktop.png", "caption": "shopping desktop.png", "findingIds": [ "F03" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout.json", "condition": "viewport: 360x800", "findingIds": [ "F05" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile.png", "condition": "viewport: 360x800", "findingIds": [ "F05" ] }, { "type": "screenshot", "path": "evidence/ideas-desktop.png", "caption": "ideas desktop.png", "findingIds": [ "F06" ] }, { "type": "lighthouse", "path": "evidence/home-lighthouse-summary.json", "caption": "home lighthouse summary.json", "findingIds": [ "F07", "F08", "F10" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary.json", "findingIds": [ "F07", "F08" ] }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images.json", "findingIds": [ "F09", "F14" ] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability.json", "findingIds": [ "F11" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler.png", "findingIds": [ "F11" ] }, { "type": "discoverability", "path": "evidence/ideas-discoverability.json", "caption": "ideas discoverability.json", "findingIds": [ "F11" ] }, { "type": "discoverability", "path": "evidence/shopping-discoverability.json", "caption": "shopping discoverability.json", "findingIds": [ "F11" ] }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "home cookies.json", "findingIds": [ "F12" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "home headers.json", "findingIds": [ "F12" ] }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "home trackers.json", "findingIds": [ "F13" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary.json", "findingIds": [ "F13" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline.heapsnapshot", "findingIds": [ "F15", "F18" ] }, { "type": "heap", "path": "evidence/heap-post-scroll.heapsnapshot", "caption": "heap post scroll.heapsnapshot", "findingIds": [ "F15" ] }, { "type": "other", "path": "evidence/login-form-probe.json", "caption": "login form probe.json", "findingIds": [ "F16", "F17" ] }, { "type": "screenshot", "path": "evidence/login-desktop.png", "caption": "login desktop.png", "findingIds": [ "F16", "F17" ] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast.png", "findingIds": [] }, { "type": "other", "path": "evidence/home-recon.json", "caption": "home recon.json", "findingIds": [] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "home secrets.json", "findingIds": [] }, { "type": "other", "path": "evidence/robots-sitemap.txt", "caption": "robots sitemap.txt", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The dark-mode screenshot is visually identical to the light capture; DOM computed style reports a white html background and color-scheme: normal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The emulated reduce condition matched and CSS disables transitions/animations while smooth carousel motion is limited to no-preference.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The high-contrast screenshot remained legible and CSS contains prefers-contrast adaptations for sign-in controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png", "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The CSS feature probe found reduced-motion, container-query, scroll-state, scroll-marker and anchor-positioning rules, but no view-transition rules on the sampled public shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "CSS evidence uses animation-timeline:view(x) for carousel markers rather than a sampled scroll event animation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Carousel CSS uses native horizontal overflow, overscroll-behavior and scroll controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "CSS evidence uses container-type:scroll-state and target-current scroll markers for carousel position feedback.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "CSS evidence uses anchor-name, position-anchor and anchor() positioning for carousel controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Carousel markers and target-current styling provide position feedback; headings clearly segment landing sections.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Desktop captures of the home and shopping pages show a centered modal plus full-page scrim before any interaction. Reject is available and visually comparable, but the content remains blocked.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/shopping-desktop.png" ], "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "DOM evidence reports no while a fixed [role=dialog] fills the viewport; the sampled page also had no popover or details primitives.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Outside required consent/auth surfaces, screenshots devote most viewport area to imagery, headings and primary actions with restrained borders.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/ideas-desktop.png", "evidence/shopping-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Layout evidence measured scrollWidth 929px against a 360px visual viewport, 569px horizontal overflow; the mobile screenshot clips the hero heading and secondary CTA.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "CSS evidence contains multiple container-query breakpoints and cqw-based carousel sizing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Login controls are at least 48px tall and the focused email field had a visible 2px blue outline.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-form-probe.json", "evidence/login-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The home hero states “Create the life you love on Pinterest” with a prominent join action; Ideas and Shopping have specific headings.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/ideas-desktop.png", "evidence/shopping-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The Ideas page displays useful categories behind a full modal login wall on first load, preventing the representative inspiration-browsing flow without account action.", "pathIds": [ "ideas" ], "artifacts": [ "evidence/ideas-desktop.png" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The login probe found email/password required=false, aria-invalid=false, and no role=alert or aria-live error after activating submit with empty values. Focus styling itself was visible.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-form-probe.json", "evidence/login-desktop.png" ], "findingIds": [ "F16" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse measured LCP 14,865ms, CLS 0.797 and TBT 509.5ms (performance score 0.19). A separate trace measured LCP 3,098ms and TBT 111.79ms, confirming run variability but still showing blocking work.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse measured LCP 14,865ms, CLS 0.797 and TBT 509.5ms (performance score 0.19). A separate trace measured LCP 3,098ms and TBT 111.79ms, confirming run variability but still showing blocking work.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse estimated 946,268 bytes of unused JavaScript and 27,543 bytes of unused CSS; trace recorded two long tasks up to 117.82ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse measured LCP 14,865ms, CLS 0.797 and TBT 509.5ms (performance score 0.19). A separate trace measured LCP 3,098ms and TBT 111.79ms, confirming run variability but still showing blocking work. Images evidence found 27/35 oversized, 35/35 legacy JPG, 34 below-fold images not lazy-loaded, 11 missing srcset, and all 35 without explicit dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-images.json" ], "findingIds": [ "F07", "F14" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse estimated 946,268 bytes of unused JavaScript and 27,543 bytes of unused CSS; trace recorded two long tasks up to 117.82ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The images primitive found 32 of 35 images without alt text on the landing experience. These visuals communicate inspiration categories and are not all safely decorative.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json", "evidence/home-desktop.png" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Lighthouse accessibility scored 0.96 with no color-contrast failures; the contrast screenshot remained readable.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-contrast.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Lighthouse accessibility scored 0.96 and the active login input showed a visible focus outline; skip-to-content exists.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/login-form-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Desktop screenshots show readable line lengths, strong hierarchy and no sampled text overlap.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/ideas-desktop.png", "evidence/login-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Layout evidence measured scrollWidth 929px against a 360px visual viewport, 569px horizontal overflow; the mobile screenshot clips the hero heading and secondary CTA.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse captured a Google FedCM NetworkError, two first-party 404 responses and an identity-provider sign-in error.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Images evidence found 27/35 oversized, 35/35 legacy JPG, 34 below-fold images not lazy-loaded, 11 missing srcset, and all 35 without explicit dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Lighthouse best-practices scored 0.96; no permission prompt appeared on load and the viewport/doctype/charset checks passed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-recon.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "DOM recon found title “Pinterest” and a descriptive meta description; Ideas and Shopping have archetype-specific titles.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-recon.json", "evidence/home-lighthouse-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Discoverability evidence found only 1% rendered-word coverage in raw HTML, no raw h1, and isJsShell=true; the crawler screenshot says Pinterest requires JavaScript. Ideas and Shopping fare better at 48% and 62%.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-crawler.png", "evidence/ideas-discoverability.json", "evidence/shopping-discoverability.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The homepage returned 200 outside the rate-limited HAR, exposes a canonical URL, and robots.txt is available with crawler rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-recon.json", "evidence/robots-sitemap.txt" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "DOM recon found Open Graph title, description, image, URL and Twitter card metadata matching the landing page.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-recon.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Cookies evidence flags _b and _routing_id without Secure and all four cookies as SameSite=None; headers include CSP/HSTS/nosniff/frame protection but omit Permissions-Policy and retain unsafe-inline allowances.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-cookies.json", "evidence/home-headers.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Trackers evidence observed 10 third-party origins and known Pinterest tracking hosts; most requests were to pinimg plus Google/recaptcha dependencies before account use.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The login screenshot and DOM show email/password, Google and QR-code choices; no passkey/WebAuthn option was present on the representative authentication surface.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-form-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Cookies evidence flags _b and _routing_id without Secure and all four cookies as SameSite=None; headers include CSP/HSTS/nosniff/frame protection but omit Permissions-Policy and retain unsafe-inline allowances.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-cookies.json", "evidence/home-headers.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Discoverability evidence found only 1% rendered-word coverage in raw HTML, no raw h1, and isJsShell=true; the crawler screenshot says Pinterest requires JavaScript. Ideas and Shopping fare better at 48% and 62%.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-crawler.png", "evidence/ideas-discoverability.json", "evidence/shopping-discoverability.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Consent and login overlays remained fully contained at the sampled desktop viewport and provided explicit actions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/ideas-desktop.png", "evidence/shopping-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-path recon and visible content.", "evidence": "The sampled unauthenticated public content archetypes were judged as web pages rather than the installed authenticated app; offline installability was not required for these paths.", "reason": "The sampled unauthenticated public content archetypes were judged as web pages rather than the installed authenticated app; offline installability was not required for these paths." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Despite optional identity and resource errors captured by Lighthouse, the sampled public shell remained rendered and actionable rather than blank.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-desktop.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The localized UK response declares html lang=en; sampled CSS uses extensive margin/padding inline/block logical properties.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-recon.json", "evidence/home-modern-css-reduced-motion.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-path recon and visible content.", "evidence": "No dates, numbers, currencies, durations or calendar data appeared in the sampled public archetypes, so locale formatting was not applicable to visible content.", "reason": "No dates, numbers, currencies, durations or calendar data appeared in the sampled public archetypes, so locale formatting was not applicable to visible content." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-path recon and visible content.", "evidence": "No event time, recurrence or time-zone-sensitive data appeared in the sampled public archetypes.", "reason": "No event time, recurrence or time-zone-sensitive data appeared in the sampled public archetypes." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The cookie modal presents Reject all, customise and Accept all at comparable prominence; login clearly links terms and free signup.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/shopping-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The login probe found email/password required=false, aria-invalid=false, and no role=alert or aria-live error after activating submit with empty values. Focus styling itself was visible.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-form-probe.json", "evidence/login-desktop.png" ], "findingIds": [ "F16" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Login fields expose email/current-password autocomplete and the signup probe exposed email/new-password/bday tokens.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-form-probe.json", "evidence/home-recon.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "The sampled sign-in surface states its purpose, exposes recovery and alternate methods, and makes signup/terms visible.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-desktop.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Images evidence found 27/35 oversized, 35/35 legacy JPG, 34 below-fold images not lazy-loaded, 11 missing srcset, and all 35 without explicit dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Lighthouse estimated 946,268 bytes of unused JavaScript and 27,543 bytes of unused CSS; trace recorded two long tasks up to 117.82ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "Trackers evidence observed 10 third-party origins and known Pinterest tracking hosts; most requests were to pinimg plus Google/recaptcha dependencies before account use. Images evidence found 27/35 oversized, 35/35 legacy JPG, 34 below-fold images not lazy-loaded, 11 missing srcset, and all 35 without explicit dimensions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json", "evidence/home-images.json" ], "findingIds": [ "F13", "F14" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-path recon and visible content.", "evidence": "This emerging capability was judged out of scope without declared agent-facing intent; absence is an opportunity rather than a defect under the contextual principle.", "reason": "This emerging capability was judged out of scope without declared agent-facing intent; absence is an opportunity rather than a defect under the contextual principle." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-path recon and visible content.", "evidence": "No user task in the sampled public paths required on-device generation or summarisation; the contextual emerging check was judged not applicable.", "reason": "No user task in the sampled public paths required on-device generation or summarisation; the contextual emerging check was judged not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "issues", "confidence": "medium", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "After ten bottom/top scroll cycles, heap self size grew from 60.1MB to 66.8MB (+11.3%), node count from 897,011 to 1,058,064 (+18.0%), objects from 93,574 to 170,245, and closures from 48,729 to 62,773. This may include intentional lazy-loaded content, so confidence is medium.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-scroll.heapsnapshot" ], "findingIds": [ "F15" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Triangulated the check with the linked captured artifacts and representative-path inspection.", "evidence": "The baseline heap summary contains 897,011 nodes, 3,902,046 edges and 60.1MB self size before an authenticated feed is opened.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "findingIds": [ "F18" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "low", "method": "Direct representative-path visual, DOM, computed-style, Lighthouse, network, metadata, or heap evidence as cited.", "evidence": "Neither heap summary listed Detached* constructors among the largest retained populations; this is low-confidence because listener instrumentation was unavailable.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-scroll.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F16" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08", "F14" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F05" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F14" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F11" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F17" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F11" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F16" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F14", "F08", "F13" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "This emerging capability was judged out of scope without declared agent-facing intent; absence is an opportunity rather than a defect under the contextual principle. No user task in the sampled public paths required on-device generation or summarisation; the contextual emerging check was judged not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F18" ] } ], "paths": [ { "id": "home", "description": "Public landing page and primary join/discovery entry. Tested desktop, 360px mobile, dark, high contrast, reduced motion, non-JS, performance, network, privacy, image and memory conditions.", "url": "https://www.pinterest.com/", "conditions": [ "desktop 1440x900", "mobile 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "JavaScript disabled/crawler", "cold load", "repeated scrolling" ], "result": "issues" }, { "id": "ideas", "description": "Representative public category/listing archetype and inspiration-browsing journey.", "url": "https://www.pinterest.com/ideas/", "conditions": [ "desktop 1440x900", "JavaScript disabled/crawler" ], "result": "issues" }, { "id": "shopping", "description": "Representative commerce discovery/listing archetype.", "url": "https://www.pinterest.com/shopping/", "conditions": [ "desktop 1440x900", "JavaScript disabled/crawler" ], "result": "issues" }, { "id": "login", "description": "Representative authentication form and account-entry flow, including empty submission and keyboard focus.", "url": "https://www.pinterest.com/login/", "conditions": [ "desktop 1440x900", "keyboard focus", "empty form submission" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "summary": "The public experience does not adapt to dark colour preference.", "evidence": "The dark-mode screenshot is visually identical to the light capture; DOM computed style reports a white html background and color-scheme: normal.", "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare color-scheme and provide preference-driven dark surface/text tokens with prefers-color-scheme or light-dark().", "effort": "medium" }, { "id": "F02", "severity": "low", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "summary": "Route and major state changes do not expose View Transition styling.", "evidence": "The CSS feature probe found reduced-motion, container-query, scroll-state, scroll-marker and anchor-positioning rules, but no view-transition rules on the sampled public shell.", "artifacts": [ "evidence/home-modern-css-reduced-motion.json" ], "suggestedFix": "Use same-document or cross-document View Transitions for major route/state changes, gated by reduced-motion.", "effort": "medium" }, { "id": "F03", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "summary": "A consent modal obscures the primary page content on initial load.", "evidence": "Desktop captures of the home and shopping pages show a centered modal plus full-page scrim before any interaction. Reject is available and visually comparable, but the content remains blocked.", "artifacts": [ "evidence/home-desktop.png", "evidence/shopping-desktop.png" ], "suggestedFix": "Where lawful, keep essential consent choices concise and avoid blocking non-tracking content; preserve equally prominent reject/customise actions.", "effort": "small" }, { "id": "F04", "severity": "low", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "summary": "Modal surfaces use custom role=dialog containers instead of the native dialog primitive.", "evidence": "DOM evidence reports no while a fixed [role=dialog] fills the viewport; the sampled page also had no popover or details primitives.", "artifacts": [ "evidence/home-dom.json" ], "suggestedFix": "Use for modal flows and popover/details for transient or disclosure UI, retaining labelled focus management.", "effort": "medium" }, { "id": "F05", "severity": "critical", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "summary": "The homepage overflows and clips core content at a 360px viewport.", "evidence": "Layout evidence measured scrollWidth 929px against a 360px visual viewport, 569px horizontal overflow; the mobile screenshot clips the hero heading and secondary CTA.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "suggestedFix": "Remove fixed desktop sizing, constrain flex/grid children with intrinsic sizing, and verify the entire core flow at 320–360px.", "effort": "medium" }, { "id": "F06", "severity": "high", "confidence": "high", "pathId": "ideas", "url": "https://www.pinterest.com/ideas/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "summary": "Public discovery journeys are interrupted by an immediate account wall.", "evidence": "The Ideas page displays useful categories behind a full modal login wall on first load, preventing the representative inspiration-browsing flow without account action.", "artifacts": [ "evidence/ideas-desktop.png" ], "suggestedFix": "Allow a meaningful public browse path before authentication, then request sign-in in context for save/personalisation actions.", "effort": "large" }, { "id": "F07", "severity": "critical", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "summary": "Cold-load performance and visual stability are far outside good Core Web Vitals ranges.", "evidence": "Lighthouse measured LCP 14,865ms, CLS 0.797 and TBT 509.5ms (performance score 0.19). A separate trace measured LCP 3,098ms and TBT 111.79ms, confirming run variability but still showing blocking work.", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Profile the LCP dependency chain, reserve media space, prioritise the LCP asset, and reduce startup work; validate against field data and repeat lab runs.", "effort": "large" }, { "id": "F08", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "guidanceCategory": "performance", "summary": "Large unused JavaScript and long main-thread tasks burden startup.", "evidence": "Lighthouse estimated 946,268 bytes of unused JavaScript and 27,543 bytes of unused CSS; trace recorded two long tasks up to 117.82ms.", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Split route code, conditionally load authentication/analytics dependencies, and break or schedule long tasks by priority.", "effort": "large" }, { "id": "F09", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Most sampled images lack alternative text.", "evidence": "The images primitive found 32 of 35 images without alt text on the landing experience. These visuals communicate inspiration categories and are not all safely decorative.", "artifacts": [ "evidence/home-images.json", "evidence/home-desktop.png" ], "suggestedFix": "Provide concise contextual alt text for meaningful pins/category images and alt=\"\" only for truly decorative duplicates.", "effort": "medium" }, { "id": "F10", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "html", "summary": "The page logs runtime and network errors during a normal load.", "evidence": "Lighthouse captured a Google FedCM NetworkError, two first-party 404 responses and an identity-provider sign-in error.", "artifacts": [ "evidence/home-lighthouse-summary.json" ], "suggestedFix": "Handle expected identity-provider states without console.error and repair or suppress failed first-party resource requests.", "effort": "small" }, { "id": "F11", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "html", "summary": "The canonical homepage is effectively a JavaScript shell for non-JS crawlers.", "evidence": "Discoverability evidence found only 1% rendered-word coverage in raw HTML, no raw h1, and isJsShell=true; the crawler screenshot says Pinterest requires JavaScript. Ideas and Shopping fare better at 48% and 62%.", "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-crawler.png", "evidence/ideas-discoverability.json", "evidence/shopping-discoverability.json" ], "suggestedFix": "Server-render the homepage purpose, headings, primary links and representative content; hydrate enhancements rather than replacing core content.", "effort": "large" }, { "id": "F12", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "summary": "Cookie and browser-policy settings leave avoidable security gaps.", "evidence": "Cookies evidence flags _b and _routing_id without Secure and all four cookies as SameSite=None; headers include CSP/HSTS/nosniff/frame protection but omit Permissions-Policy and retain unsafe-inline allowances.", "artifacts": [ "evidence/home-cookies.json", "evidence/home-headers.json" ], "suggestedFix": "Mark every HTTPS cookie Secure, narrow SameSite where possible, add a least-privilege Permissions-Policy, and continue reducing CSP unsafe-inline dependencies.", "effort": "medium" }, { "id": "F13", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "summary": "The unauthenticated landing load has a broad third-party and tracking footprint.", "evidence": "Trackers evidence observed 10 third-party origins and known Pinterest tracking hosts; most requests were to pinimg plus Google/recaptcha dependencies before account use.", "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "suggestedFix": "Inventory and defer non-essential third parties until consent/context, batch analytics, and document the minimum data purpose for each origin.", "effort": "large" }, { "id": "F14", "severity": "high", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "summary": "Landing-page images are oversized, legacy-formatted and insufficiently deferred.", "evidence": "Images evidence found 27/35 oversized, 35/35 legacy JPG, 34 below-fold images not lazy-loaded, 11 missing srcset, and all 35 without explicit dimensions.", "artifacts": [ "evidence/home-images.json" ], "suggestedFix": "Serve responsive AVIF/WebP sources, add intrinsic dimensions, choose correct srcset sizes, and lazy-load below-fold media.", "effort": "large" }, { "id": "F15", "severity": "medium", "confidence": "medium", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-memory-efficient", "principleCheckId": "no-leak-under-repeated-interaction", "guidanceId": "manage-recurring-intervals", "guidanceCategory": "user-experience", "summary": "Repeated feed-style scrolling retains substantial additional heap.", "evidence": "After ten bottom/top scroll cycles, heap self size grew from 60.1MB to 66.8MB (+11.3%), node count from 897,011 to 1,058,064 (+18.0%), objects from 93,574 to 170,245, and closures from 48,729 to 62,773. This may include intentional lazy-loaded content, so confidence is medium.", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-scroll.heapsnapshot" ], "suggestedFix": "Repeat the scenario in one instrumented session with GC and stabilization between cycles; bound caches and clean up observers/listeners for offscreen feed content.", "effort": "large" }, { "id": "F16", "severity": "high", "confidence": "high", "pathId": "login", "url": "https://www.pinterest.com/login/", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "guidanceCategory": "accessibility", "summary": "Empty login submission provides no observable error or required-field state.", "evidence": "The login probe found email/password required=false, aria-invalid=false, and no role=alert or aria-live error after activating submit with empty values. Focus styling itself was visible.", "artifacts": [ "evidence/login-form-probe.json", "evidence/login-desktop.png" ], "suggestedFix": "Use required constraints, validate after interaction, set aria-invalid, and announce specific errors through a live region while moving focus predictably.", "effort": "small" }, { "id": "F17", "severity": "medium", "confidence": "high", "pathId": "login", "url": "https://www.pinterest.com/login/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "passkeys", "summary": "The sampled sign-in flow offers passwords and federated/QR options but no visible passkey path.", "evidence": "The login screenshot and DOM show email/password, Google and QR-code choices; no passkey/WebAuthn option was present on the representative authentication surface.", "artifacts": [ "evidence/login-desktop.png", "evidence/login-form-probe.json" ], "suggestedFix": "Offer passkey sign-in and registration alongside recovery-compatible existing methods, with conditional UI where supported.", "effort": "large" }, { "id": "F18", "severity": "medium", "confidence": "high", "pathId": "home", "url": "https://www.pinterest.com/", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "defer-rendering-heavy-content", "guidanceCategory": "performance", "summary": "The initial heap/DOM footprint is heavy for a public landing page.", "evidence": "The baseline heap summary contains 897,011 nodes, 3,902,046 edges and 60.1MB self size before an authenticated feed is opened.", "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "suggestedFix": "Audit startup object ownership and delay feed, auth and analytics graphs until needed; set a bounded heap/DOM budget for the unauthenticated shell.", "effort": "large" } ], "taskList": [ { "id": "T01", "title": "Fix 360px reflow and clipped primary actions", "priority": 1, "findingIds": [ "F05" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Recover Core Web Vitals and reduce startup JavaScript", "priority": 2, "findingIds": [ "F07", "F08" ], "guidanceId": "performance", "status": "open" }, { "id": "T03", "title": "Make core homepage and discovery content server-rendered and publicly reachable", "priority": 3, "findingIds": [ "F06", "F11" ], "guidanceId": "improve-next-page-load-performance", "status": "open" }, { "id": "T04", "title": "Optimise and correctly describe responsive imagery", "priority": 4, "findingIds": [ "F09", "F14" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T05", "title": "Harden cookies, browser policies and third-party loading", "priority": 5, "findingIds": [ "F12", "F13" ], "guidanceId": "security", "status": "open" }, { "id": "T06", "title": "Add humane login errors and passkey authentication", "priority": 6, "findingIds": [ "F16", "F17" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T07", "title": "Investigate and bound landing/feed memory growth", "priority": 7, "findingIds": [ "F15", "F18" ], "guidanceId": "manage-recurring-intervals", "status": "open" }, { "id": "T08", "title": "Respect dark mode and modernise transitions/dialog primitives", "priority": 8, "findingIds": [ "F01", "F02", "F03", "F04" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T09", "title": "Clean normal-load console and resource errors", "priority": 9, "findingIds": [ "F10" ], "guidanceId": "html", "status": "open" } ], "budget": { "wallClockSeconds": 900, "pathCount": 4, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-23T05-38-33-985Z" }