{ "url": "https://nl.xhamster.com", "auditedAt": "2026-07-23T08:45:22.987Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete model-led audit of six representative paths; account-only, payment, playback-after-verification, and destructive account actions were not exercised.", "page": { "appType": "mpa", "framework": "server-rendered multi-page application with deferred JavaScript", "notes": "Adult media listing/detail site localized to Dutch. Public HTML is substantially server rendered. Consent and jurisdictional age-verification UI appear before playback." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "lighthouse", "heap-summary", "curl" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage desktop with consent state", "condition": "desktop 1440x900", "findingIds": [ "F06", "F07" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage at narrow viewport showing clipped desktop layout", "condition": "viewport 360x800", "findingIds": [ "F08", "F09", "F16" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Homepage narrow layout metrics", "condition": "viewport 360x800", "findingIds": [ "F08", "F18" ] }, { "type": "layout", "path": "evidence/video-mobile-layout.json", "caption": "Video narrow layout metrics", "condition": "viewport 360x800", "findingIds": [ "F08" ] }, { "type": "screenshot", "path": "evidence/categories-desktop.png", "caption": "Category index after consent interaction", "condition": "desktop 1440x900", "findingIds": [] }, { "type": "screenshot", "path": "evidence/video-desktop.png", "caption": "Video detail and consent state", "condition": "desktop 1440x900", "findingIds": [ "F07" ] }, { "type": "screenshot", "path": "evidence/signup-desktop.png", "caption": "Sign-up surface", "condition": "desktop 1440x900", "findingIds": [] }, { "type": "screenshot", "path": "evidence/search.png", "caption": "Search query surface", "condition": "desktop 1440x900", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404.png", "caption": "Localized 404 and recovery options", "condition": "desktop 1440x900", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-light.png", "caption": "Homepage under light preference", "condition": "prefers-color-scheme: light", "findingIds": [] }, { "type": "other", "path": "evidence/home-light-probe.json", "caption": "CSS, animation, focus and target probe", "condition": "light/no-preference", "findingIds": [ "F05", "F09", "F10", "F17" ] }, { "type": "other", "path": "evidence/home-dark-reduce-probe.json", "caption": "Dark/reduced-motion/contrast probe", "condition": "dark, reduced motion, more contrast", "findingIds": [ "F01", "F02" ] }, { "type": "har", "path": "evidence/home.har", "caption": "Load network archive", "condition": "homepage load", "findingIds": [ "F13" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact network summary", "condition": "homepage load", "findingIds": [ "F13", "F14", "F23", "F31", "F32" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools load trace", "condition": "homepage load", "findingIds": [ "F12" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact trace timings and long tasks", "condition": "homepage load", "findingIds": [ "F11", "F12", "F31" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered content analysis", "condition": "JavaScript on/off", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered browser view", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler/no-JS view", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Mobile Lighthouse report", "condition": "default mobile", "findingIds": [ "F02", "F10", "F11", "F13", "F14", "F15", "F16", "F17", "F18", "F31" ] }, { "type": "other", "path": "evidence/lighthouse-summary.json", "caption": "Compact Lighthouse metrics/audits", "condition": "default mobile", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response headers", "condition": "homepage", "findingIds": [ "F22", "F25" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie attributes", "condition": "homepage", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Cross-origin/tracker inventory", "condition": "homepage", "findingIds": [ "F23", "F32" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-exposed secrets scan", "condition": "homepage", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "Image sizing, format and alt audit", "condition": "homepage", "findingIds": [ "F19", "F30" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary", "condition": "homepage after load", "findingIds": [ "F33" ] }, { "type": "heap", "path": "evidence/heap-post.json", "caption": "Heap after ten repeated scroll cycles", "condition": "repeated interaction", "findingIds": [ "F33" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "Document, semantic, CSS and script probe", "condition": "homepage", "findingIds": [ "F03", "F06", "F26" ] }, { "type": "other", "path": "evidence/scroll-probe.json", "caption": "Scrolled sticky-chrome probe", "condition": "scrollY 1200", "findingIds": [ "F04" ] }, { "type": "other", "path": "evidence/cookie-dismiss-probe.json", "caption": "Consent rejection and hit-testing probe", "condition": "reject consent", "findingIds": [] }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "Service worker/cache probe", "condition": "homepage", "findingIds": [] }, { "type": "other", "path": "evidence/recon-meta.json", "caption": "Homepage forms and metadata", "condition": "homepage", "findingIds": [ "F20" ] }, { "type": "other", "path": "evidence/video-meta.json", "caption": "Video detail metadata", "condition": "video detail", "findingIds": [ "F21" ] }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "Sign-up methods and DOM", "condition": "signup", "findingIds": [ "F24" ] }, { "type": "other", "path": "evidence/signup-email-error-probe.json", "caption": "Email form invalid-submit state", "condition": "signup invalid submit", "findingIds": [ "F28", "F29" ] }, { "type": "other", "path": "evidence/input-locale-probe.json", "caption": "Viewport, auth, input and locale samples", "condition": "homepage", "findingIds": [ "F24", "F27" ] }, { "type": "other", "path": "evidence/404-probe.json", "caption": "Localized 404 content/recovery probe", "condition": "unknown route", "findingIds": [] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Robots policy", "condition": "crawler fetch", "findingIds": [ "F20" ] }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "Robots response headers", "condition": "crawler fetch", "findingIds": [ "F20" ] }, { "type": "other", "path": "evidence/manifest.webmanifest", "caption": "Web app manifest", "condition": "manifest fetch", "findingIds": [] }, { "type": "other", "path": "evidence/guidance-list.json", "caption": "Pinned Modern Web Guidance catalog consulted", "condition": "modern-web-guidance@0.0.172", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Light and dark emulation changed foreground colors (48,48,48 vs 245,245,245), and CSS included a color-scheme preference signal.", "pathIds": [ "home" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Under prefers-reduced-motion: reduce, eight 2-second animations remained running; CSS inspection found no prefers-reduced-motion rule.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark-reduce-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "CSS inspection found no prefers-contrast or forced-colors handling. Lighthouse measured ratios as low as 1.75:1 on the age banner and 3.29:1 on view counts.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-dark-reduce-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Rendered CSS contained no view-transition declarations and representative routes are full-document navigations with abrupt swaps.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "CSS/animation inspection found no scroll-linked decorative motion, so no main-thread scroll animation anti-pattern was active on sampled pages.", "pathIds": [ "home" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Sampled flows use native scrolling and links; no custom swipe/pointer gesture surface that fights platform behavior was observed.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "At scrollY 1200 the 84px age-verification bar remained sticky at top; CSS had no scroll-state query or scroll progress treatment.", "pathIds": [ "home" ], "artifacts": [ "evidence/scroll-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The page exposes multiple header/dropdown controls, while CSS inspection found no anchor-name, position-anchor, or position-try rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-light-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Active navigation is underlined, category tabs expose current state, and the 404 route provides a clear return-to-home link.", "pathIds": [ "home" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "The required consent modal presents equal Accept/Reject actions; an active rejection probe confirmed it dismisses fully and restores page hit-testing.", "pathIds": [ "home" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The visible modal blocks the page, but DOM inspection found 0 dialog, 0 popover, and 0 details elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/platform-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Desktop screenshots show two navigation rows, a persistent verification banner, a 190px sidebar, consent UI, and promotional cards surrounding the video grid/player.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/video-desktop.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Layout measurements on both home and video pages reported scrollWidth 1024, visual viewport 360, and 664px horizontal overflow. The mobile screenshot shows clipped navigation and cards.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/video-mobile-layout.json" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "CSS inspection found no @container rules, while the same sidebar/card layout remains desktop-sized and clipped in the 360px condition.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-light-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Programmatically focusing the first visible link produced outline-style none and no box shadow. Lighthouse also found 20px-high targets and insufficient spacing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-light-probe.json", "evidence/lighthouse.json" ], "findingIds": [ "F10" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Homepage/category/detail pages expose descriptive H1s, clear media cards, search, and direct primary actions in the first viewport.", "pathIds": [ "home" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Homepage links lead to a representative detail route; category browsing, sign-up method selection, and 404 recovery remained navigable.", "pathIds": [ "home" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "The unknown route presents a localized not-found explanation, contact/return action, and alternative content rather than a blank shell.", "pathIds": [ "home" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Lighthouse measured LCP 3.9s and FCP 3.0s (performance 0.83); the separate trace measured LCP 1.98s, showing condition-sensitive performance.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Layout observer measured CLS 0 on home and video samples; Lighthouse also reported CLS 0.", "pathIds": [ "home" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The trace recorded 2 long tasks, a longest task of 188.28ms, and 151.79ms total blocking time.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "HAR recorded 144 requests, 62 scripts, 11 stylesheets, 1.77MB transferred, and multiple parser-inserted VeryHigh-priority stylesheets; Lighthouse LCP was 3.9s.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Lighthouse found 26,972 wasted JS bytes in assetsLoader and 94.9%/89.7% waste in two mobile stylesheets; HAR recorded 62 scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Lighthouse failed button-name and label-content-name-mismatch, including an unnamed filter button and video links whose accessible name omits visible duration text.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Lighthouse reported 1.75:1 age-banner secondary text, 2.15:1 banner primary text, and 3.29:1 view counts against their backgrounds.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile.png" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The focused GB link had no visible outline. Lighthouse found a ul with direct div, complementary, and role=button children instead of li elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-light-probe.json", "evidence/lighthouse.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Desktop content uses readable sizing and clear hierarchy, with headings and labels remaining legible outside the separately reported contrast/reflow failures.", "pathIds": [ "home" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Lighthouse found user-scalable=no in the effective mobile viewport and undersized targets; 360px layout evidence recorded 664px horizontal overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F18" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Lighthouse errors-in-console audit passed with no logged browser errors.", "pathIds": [ "home" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The image audit found 29 of 36 images missing dimensions and 12 oversized relative to display size, despite valid doctype/charset and correct sampled aspect ratios.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F19" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Lighthouse passed deprecations, BFCache, valid source maps and prompt-related best-practice audits; no permission prompt appeared on load.", "pathIds": [ "home" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Homepage and video detail expose unique descriptive titles and localized meta descriptions.", "pathIds": [ "home" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Links have real href values, a viewport meta exists, and robots.txt permits the homepage and primary public routes.", "pathIds": [ "home" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The page had a canonical URL and robots.txt allowed core pages, but exposed no hreflang links across its many language hosts; /sitemap.xml returned 404.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon-meta.json", "evidence/robots.txt", "evidence/robots-headers.txt" ], "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The representative detail page had useful Open Graph metadata but no JSON-LD VideoObject; og:image:type declared image/jpeg for a .webp URL.", "pathIds": [ "video" ], "artifacts": [ "evidence/video-meta.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "CSP is only frame-ancestors self, offering no script/style XSS policy. The settings and x_csrf_token cookies were not Secure; settings also used SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "HAR attributed 117 of 144 requests and 1.66MB of 1.77MB to non-main origins; tracker enumeration found 14 third-party origins, including Google, tsydndicate and collector endpoints.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "No permission prompt appeared on load, but the sign-up surface offered Google, X and email/password only; no passkey text or WebAuthn flow was exposed.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-probe.json", "evidence/input-locale-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Headers lacked X-Content-Type-Options and Referrer-Policy. Permissions-Policy only set two client-hint directives and the CSP had no broader XSS controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Discoverability fetch found 88% raw/rendered content overlap, no empty app mount, and a usable crawler screenshot.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Consent rejection fully removed the fixed overlay, representative menus/content rendered, and recovery routes remained usable.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "A manifest is linked, an active pwa.js service worker is registered, and xh-offline-cache-1.6.5 exists.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "A real unknown URL returns a localized 404 state with explanation, home recovery and alternatives.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "html lang was correctly nl, but inspected CSS contained about 695 physical left/right declarations versus 26 logical inline/block declarations.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The Dutch page renders values such as 8.7M and 600.5K; Dutch formatting convention uses comma decimals and locale-aware compact notation.", "pathIds": [ "home" ], "artifacts": [ "evidence/input-locale-probe.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from route and task recon.", "evidence": "Sampled public pages expose durations and relative counts but no dates, appointments, recurring events, or user-entered time-zone data to judge.", "reason": "Sampled public pages expose durations and relative counts but no dates, appointments, recurring events, or user-entered time-zone data to judge." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Consent Accept and Reject have equal prominence, privacy explanations are linked, and sign-up disclosure states public/partner data use.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Empty submission displayed Dutch required/password messages, but inputs had no aria-invalid and no role=alert/live-region messages were found.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-error-probe.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The email input used autocomplete=off while the password correctly used new-password; required semantics were not exposed on either field.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-error-probe.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "The sampled sign-up flow labels free registration, exposes login alternatives, states age verification and data-use terms before commitment.", "pathIds": [ "home" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Image inspection found 12 oversized images, 29 missing dimensions, 8 below-fold images not lazy, and 16 legacy-format detections.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "The page loaded 62 scripts totaling about 1.01MB and the trace recorded 151.79ms blocking time, while Lighthouse identified large unused CSS/JS portions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json", "evidence/lighthouse.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Non-main origins accounted for 1.66MB and 117 requests; scripts alone transferred 1.01MB before a video was played.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F32" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from route and task recon.", "evidence": "No declared agent-facing transaction or productivity capability was identified; this emerging check is not required for the sampled adult media publication surface.", "reason": "No declared agent-facing transaction or productivity capability was identified; this emerging check is not required for the sampled adult media publication surface." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from route and task recon.", "evidence": "No summarisation, composition, or inference task is part of the sampled core journeys, so on-device inference is not applicable.", "reason": "No summarisation, composition, or inference task is part of the sampled core journeys, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "After ten bottom/top scroll cycles, heap self size increased about 3.2MB (8.9%), consistent with lazy-loaded feed content rather than demonstrated unbounded growth; no Detached constructor dominated.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/performance evidence on representative paths, judged against consulted mapped guidance.", "evidence": "Baseline heap summary contained 678,439 nodes and 36.1MB self size; after repeated scrolling it reached 743,136 nodes and 39.3MB.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ], "findingIds": [ "F33" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct screenshot, DOM/evaluate, Lighthouse, network, discoverability, recovery, or heap evidence as appropriate.", "evidence": "Baseline/post heap summaries showed no Detached constructor among dominant populations; no evidence of accumulating detached DOM was observed.", "pathIds": [ "home" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F16", "F17", "F18" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F19" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F20", "F21" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F22", "F23", "F24", "F25" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F26", "F27" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F28", "F29" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F30", "F31", "F32" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing transaction or productivity capability was identified; this emerging check is not required for the sampled adult media publication surface. No summarisation, composition, or inference task is part of the sampled core journeys, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F33" ] } ], "paths": [ { "id": "home", "description": "Homepage and primary discovery feed; represents global navigation, content cards, search entry, consent and age-verification states.", "url": "https://nl.xhamster.com/", "conditions": [ "desktop 1440x900", "mobile 360x800", "prefers-color-scheme: light/dark", "prefers-reduced-motion: reduce", "keyboard focus" ], "result": "issues" }, { "id": "categories", "description": "Category index; represents dense listing/filter navigation and overlay dismissal.", "url": "https://nl.xhamster.com/categories", "conditions": [ "desktop 1440x900", "cookie rejection" ], "result": "issues" }, { "id": "video", "description": "Representative video detail; represents the core content-consumption journey and rich-entity metadata.", "url": "https://nl.xhamster.com/videos/hotel-housekeeping-latin-girl-with-a-big-booty-seduced-by-the-guest-xhIvkLI", "conditions": [ "desktop 1440x900", "mobile 360x800" ], "result": "issues" }, { "id": "signup", "description": "Sign-up entry and email validation; represents authentication, consent disclosure, autofill and error handling.", "url": "https://nl.xhamster.com/signup?source=menuSignup", "conditions": [ "desktop 1440x900", "empty email submission" ], "result": "issues" }, { "id": "search", "description": "Search query URL; represents content lookup and search results presentation.", "url": "https://nl.xhamster.com/?q=test", "conditions": [ "desktop 1440x900" ], "result": "issues" }, { "id": "not-found", "description": "Unknown route; represents HTTP failure messaging and recovery.", "url": "https://nl.xhamster.com/does-not-exist-web-uplift", "conditions": [ "desktop 1440x900" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "summary": "Reduced-motion preference is ignored.", "evidence": "Under prefers-reduced-motion: reduce, eight 2-second animations remained running; CSS inspection found no prefers-reduced-motion rule.", "suggestedFix": "Wrap non-essential animation and autoplay behavior in prefers-reduced-motion: no-preference and provide a reduced/static state.", "effort": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-dark-reduce-probe.json" ] }, { "id": "F02", "severity": "high", "confidence": "high", "summary": "High-contrast users receive low-contrast text and no contrast-specific adaptation.", "evidence": "CSS inspection found no prefers-contrast or forced-colors handling. Lighthouse measured ratios as low as 1.75:1 on the age banner and 3.29:1 on view counts.", "suggestedFix": "Add forced-colors/prefers-contrast styles, preserve system colors, and raise text/UI contrast to WCAG minimums.", "effort": "large", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-dark-reduce-probe.json" ] }, { "id": "F03", "severity": "low", "confidence": "high", "summary": "Route changes have no continuity transition.", "evidence": "Rendered CSS contained no view-transition declarations and representative routes are full-document navigations with abrupt swaps.", "suggestedFix": "Use same-origin cross-document View Transitions for route continuity, with a reduced-motion fallback.", "effort": "medium", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/platform-probe.json" ] }, { "id": "F04", "severity": "low", "confidence": "high", "summary": "Sticky chrome does not adapt as content scrolls.", "evidence": "At scrollY 1200 the 84px age-verification bar remained sticky at top; CSS had no scroll-state query or scroll progress treatment.", "suggestedFix": "Collapse or soften persistent chrome after scrolling using scroll-state-aware styling while keeping verification accessible.", "effort": "medium", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/scroll-probe.json" ] }, { "id": "F05", "severity": "low", "confidence": "high", "summary": "Menus and transient controls do not use resilient anchor positioning.", "evidence": "The page exposes multiple header/dropdown controls, while CSS inspection found no anchor-name, position-anchor, or position-try rules.", "suggestedFix": "Use CSS anchor positioning and fallback position-try rules for menus and tooltips near viewport edges.", "effort": "medium", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-light-probe.json" ] }, { "id": "F06", "severity": "medium", "confidence": "high", "summary": "The consent modal and menu overlays are custom rather than semantic primitives.", "evidence": "The visible modal blocks the page, but DOM inspection found 0 dialog, 0 popover, and 0 details elements.", "suggestedFix": "Implement modal flows with dialog and transient menus with popover, including declarative light-dismiss and focus restoration.", "effort": "medium", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-desktop.png", "evidence/platform-probe.json" ] }, { "id": "F07", "severity": "medium", "confidence": "high", "summary": "Dense chrome and promotions crowd the primary content.", "evidence": "Desktop screenshots show two navigation rows, a persistent verification banner, a 190px sidebar, consent UI, and promotional cards surrounding the video grid/player.", "suggestedFix": "Reduce persistent navigation and promotional chrome, prioritize the media grid/player, and progressively disclose secondary categories.", "effort": "medium", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "overflow-clipping-control", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-desktop.png", "evidence/video-desktop.png" ] }, { "id": "F08", "severity": "critical", "confidence": "high", "summary": "The mobile layout renders a 1024px desktop canvas inside a 360px viewport.", "evidence": "Layout measurements on both home and video pages reported scrollWidth 1024, visual viewport 360, and 664px horizontal overflow. The mobile screenshot shows clipped navigation and cards.", "suggestedFix": "Remove the 1024px minimum layout, honor the device viewport, and use fluid grids/intrinsic sizing that reflow at 360px without horizontal scrolling.", "effort": "large", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/video-mobile-layout.json" ] }, { "id": "F09", "severity": "high", "confidence": "high", "summary": "Reused content components do not adapt to their available container.", "evidence": "CSS inspection found no @container rules, while the same sidebar/card layout remains desktop-sized and clipped in the 360px condition.", "suggestedFix": "Give reusable regions containment and apply size-aware container queries to cards, navigation, and sidebars.", "effort": "large", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-light-probe.json", "evidence/home-mobile.png" ] }, { "id": "F10", "severity": "high", "confidence": "high", "summary": "Keyboard focus is invisible and some touch targets are undersized.", "evidence": "Programmatically focusing the first visible link produced outline-style none and no box shadow. Lighthouse also found 20px-high targets and insufficient spacing.", "suggestedFix": "Add a strong :focus-visible treatment and ensure interactive targets provide at least 24px safe space, preferably 44px for primary touch controls.", "effort": "large", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-light-probe.json", "evidence/lighthouse.json" ] }, { "id": "F11", "severity": "high", "confidence": "high", "summary": "Mobile largest-contentful paint misses the good threshold.", "evidence": "Lighthouse measured LCP 3.9s and FCP 3.0s (performance 0.83); the separate trace measured LCP 1.98s, showing condition-sensitive performance.", "suggestedFix": "Prioritize the LCP resource, cut startup script/CSS cost, and validate LCP below 2.5s on representative mobile hardware.", "effort": "large", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ] }, { "id": "F12", "severity": "medium", "confidence": "high", "summary": "Startup JavaScript creates blocking main-thread work.", "evidence": "The trace recorded 2 long tasks, a longest task of 188.28ms, and 151.79ms total blocking time.", "suggestedFix": "Break long tasks into scheduled chunks and defer non-critical feed, consent, and promotional code.", "effort": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-trace.json" ] }, { "id": "F13", "severity": "high", "confidence": "high", "summary": "The startup dependency graph is request-heavy and delays rendering.", "evidence": "HAR recorded 144 requests, 62 scripts, 11 stylesheets, 1.77MB transferred, and multiple parser-inserted VeryHigh-priority stylesheets; Lighthouse LCP was 3.9s.", "suggestedFix": "Reduce startup dependencies, inline only critical CSS, defer non-critical styles/scripts, and tune preload/fetch priority around the LCP asset.", "effort": "large", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/lighthouse.json" ] }, { "id": "F14", "severity": "medium", "confidence": "high", "summary": "Substantial unused CSS and JavaScript ship on mobile.", "evidence": "Lighthouse found 26,972 wasted JS bytes in assetsLoader and 94.9%/89.7% waste in two mobile stylesheets; HAR recorded 62 scripts.", "suggestedFix": "Code-split by page capability, remove unused selectors, and load optional feed/player modules only when needed.", "effort": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-summary.json" ] }, { "id": "F15", "severity": "high", "confidence": "high", "summary": "Some interactive controls lack or mismatch accessible names.", "evidence": "Lighthouse failed button-name and label-content-name-mismatch, including an unnamed filter button and video links whose accessible name omits visible duration text.", "suggestedFix": "Give every control a stable accessible name that includes its visible label and preserve native element semantics.", "effort": "large", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/lighthouse.json" ] }, { "id": "F16", "severity": "high", "confidence": "high", "summary": "Text and essential UI fail WCAG contrast.", "evidence": "Lighthouse reported 1.75:1 age-banner secondary text, 2.15:1 banner primary text, and 3.29:1 view counts against their backgrounds.", "suggestedFix": "Adjust the green banner and muted-text color tokens to meet 4.5:1 for normal text and 3:1 for large text/UI.", "effort": "large", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile.png" ] }, { "id": "F17", "severity": "high", "confidence": "high", "summary": "Focus and list semantics do not provide a reliable keyboard/AT structure.", "evidence": "The focused GB link had no visible outline. Lighthouse found a ul with direct div, complementary, and role=button children instead of li elements.", "suggestedFix": "Restore visible :focus-visible styling, keep list children semantic, and ensure focus order follows the visual card order.", "effort": "large", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "move-dom-element-without-losing-state", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-light-probe.json", "evidence/lighthouse.json" ] }, { "id": "F18", "severity": "critical", "confidence": "high", "summary": "Zoom/reflow is restricted and mobile content does not reflow.", "evidence": "Lighthouse found user-scalable=no in the effective mobile viewport and undersized targets; 360px layout evidence recorded 664px horizontal overflow.", "suggestedFix": "Remove user-scalable=no, support at least 400% zoom/reflow, eliminate fixed-width overflow, and enlarge crowded targets.", "effort": "large", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/lighthouse.json", "evidence/home-mobile-layout.json" ] }, { "id": "F19", "severity": "medium", "confidence": "high", "summary": "Image markup does not reserve or consistently right-size media.", "evidence": "The image audit found 29 of 36 images missing dimensions and 12 oversized relative to display size, despite valid doctype/charset and correct sampled aspect ratios.", "suggestedFix": "Set width/height or aspect-ratio on every thumbnail and serve a closer responsive candidate for each rendered card size.", "effort": "medium", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/images.json" ] }, { "id": "F20", "severity": "medium", "confidence": "high", "summary": "Localized indexing signals are incomplete.", "evidence": "The page had a canonical URL and robots.txt allowed core pages, but exposed no hreflang links across its many language hosts; /sitemap.xml returned 404.", "suggestedFix": "Publish reciprocal hreflang links for localized equivalents and expose a valid sitemap location in robots.txt.", "effort": "medium", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/recon-meta.json", "evidence/robots.txt", "evidence/robots-headers.txt" ] }, { "id": "F21", "severity": "low", "confidence": "high", "summary": "Video pages omit structured entity data.", "evidence": "The representative detail page had useful Open Graph metadata but no JSON-LD VideoObject; og:image:type declared image/jpeg for a .webp URL.", "suggestedFix": "Add accurate VideoObject JSON-LD and make Open Graph media MIME declarations match the served asset.", "effort": "medium", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "pathId": "video", "url": "https://nl.xhamster.com/videos/hotel-housekeeping-latin-girl-with-a-big-booty-seduced-by-the-guest-xhIvkLI", "artifacts": [ "evidence/video-meta.json" ] }, { "id": "F22", "severity": "high", "confidence": "high", "summary": "Transport is HTTPS, but CSP and cookie protection are incomplete.", "evidence": "CSP is only frame-ancestors self, offering no script/style XSS policy. The settings and x_csrf_token cookies were not Secure; settings also used SameSite=None.", "suggestedFix": "Deploy a nonce/hash-based CSP beyond frame-ancestors and set Secure plus an appropriate SameSite value on every HTTPS cookie.", "effort": "large", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ] }, { "id": "F23", "severity": "high", "confidence": "high", "summary": "The initial page makes a very broad cross-origin request set.", "evidence": "HAR attributed 117 of 144 requests and 1.66MB of 1.77MB to non-main origins; tracker enumeration found 14 third-party origins, including Google, tsydndicate and collector endpoints.", "suggestedFix": "Treat owned CDNs separately but minimize external vendors, gate optional analytics/ads on consent, and batch collection with short retention.", "effort": "large", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ] }, { "id": "F24", "severity": "medium", "confidence": "high", "summary": "Authentication offers federated/email methods but no phishing-resistant passkey path.", "evidence": "No permission prompt appeared on load, but the sign-up surface offered Google, X and email/password only; no passkey text or WebAuthn flow was exposed.", "suggestedFix": "Add passkey registration and authentication alongside existing methods, requested only after explicit user action.", "effort": "medium", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "pathId": "signup", "url": "https://nl.xhamster.com/signup?source=menuSignup", "artifacts": [ "evidence/signup-probe.json", "evidence/input-locale-probe.json" ] }, { "id": "F25", "severity": "medium", "confidence": "high", "summary": "Several browser-enforced defenses are absent or too narrow.", "evidence": "Headers lacked X-Content-Type-Options and Referrer-Policy. Permissions-Policy only set two client-hint directives and the CSP had no broader XSS controls.", "suggestedFix": "Add nosniff, a restrictive Referrer-Policy, an allowlist Permissions-Policy, and strengthen CSP/Trusted Types where feasible.", "effort": "medium", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/headers.json" ] }, { "id": "F26", "severity": "medium", "confidence": "high", "summary": "Localized markup relies heavily on physical CSS directions.", "evidence": "html lang was correctly nl, but inspected CSS contained about 695 physical left/right declarations versus 26 logical inline/block declarations.", "suggestedFix": "Migrate layout spacing/positioning to logical properties and verify representative RTL locales with dir=rtl.", "effort": "medium", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/platform-probe.json" ] }, { "id": "F27", "severity": "medium", "confidence": "high", "summary": "Abbreviated counts are not formatted for the Dutch locale.", "evidence": "The Dutch page renders values such as 8.7M and 600.5K; Dutch formatting convention uses comma decimals and locale-aware compact notation.", "suggestedFix": "Use Intl.NumberFormat with the active locale and compact notation rather than hand-built K/M strings.", "effort": "medium", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "format-human-readable-durations", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/input-locale-probe.json" ] }, { "id": "F28", "severity": "medium", "confidence": "high", "summary": "Sign-up errors are visible but not programmatically announced.", "evidence": "Empty submission displayed Dutch required/password messages, but inputs had no aria-invalid and no role=alert/live-region messages were found.", "suggestedFix": "Synchronize visible validation with aria-invalid, associate messages using aria-describedby, and announce the error summary after submit.", "effort": "medium", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "pathId": "signup", "url": "https://nl.xhamster.com/signup?source=menuSignup", "artifacts": [ "evidence/signup-email-error-probe.json" ] }, { "id": "F29", "severity": "medium", "confidence": "high", "summary": "The sign-up email field disables useful autofill.", "evidence": "The email input used autocomplete=off while the password correctly used new-password; required semantics were not exposed on either field.", "suggestedFix": "Use autocomplete=email and new-password, native required attributes, and stable input names so password managers and autofill can assist.", "effort": "medium", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-up-form", "pathId": "signup", "url": "https://nl.xhamster.com/signup?source=menuSignup", "artifacts": [ "evidence/signup-email-error-probe.json" ] }, { "id": "F30", "severity": "medium", "confidence": "high", "summary": "Thumbnail delivery wastes image bytes and omits layout reservations.", "evidence": "Image inspection found 12 oversized images, 29 missing dimensions, 8 below-fold images not lazy, and 16 legacy-format detections.", "suggestedFix": "Serve closer srcset candidates, lazy-load below-fold media, reserve dimensions, and prefer modern formats throughout.", "effort": "medium", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/images.json" ] }, { "id": "F31", "severity": "medium", "confidence": "high", "summary": "Startup does disproportionate script work for a content listing.", "evidence": "The page loaded 62 scripts totaling about 1.01MB and the trace recorded 151.79ms blocking time, while Lighthouse identified large unused CSS/JS portions.", "suggestedFix": "Defer background/promotion modules, conditionally load page-specific features, and remove unused mobile bundles.", "effort": "medium", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "efficient-background-processing", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json", "evidence/lighthouse.json" ] }, { "id": "F32", "severity": "medium", "confidence": "high", "summary": "Cross-origin scripts and media dominate the transfer budget.", "evidence": "Non-main origins accounted for 1.66MB and 117 requests; scripts alone transferred 1.01MB before a video was played.", "suggestedFix": "Set a third-party budget, defer ads/social identity until interaction or consent, and cache/conditionally load heavy media integrations.", "effort": "medium", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ] }, { "id": "F33", "severity": "medium", "confidence": "high", "summary": "The initial heap footprint is large for a listing before playback.", "evidence": "Baseline heap summary contained 678,439 nodes and 36.1MB self size; after repeated scrolling it reached 743,136 nodes and 39.3MB.", "suggestedFix": "Profile feed/card allocations, virtualize or release offscreen items, and conditionally initialize promotional/player modules.", "effort": "medium", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "defer-rendering-heavy-content", "pathId": "home", "url": "https://nl.xhamster.com/", "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] } ], "taskList": [ { "id": "T01", "title": "Remove the 1024px minimum layout, honor the device viewport, and use fluid grids/intrinsic sizing that reflow at 360px without horizontal scrolling.", "priority": 1, "findingIds": [ "F08" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Remove user-scalable=no, support at least 400% zoom/reflow, eliminate fixed-width overflow, and enlarge crowded targets.", "priority": 2, "findingIds": [ "F18" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T03", "title": "Add forced-colors/prefers-contrast styles, preserve system colors, and raise text/UI contrast to WCAG minimums.", "priority": 3, "findingIds": [ "F02" ], "guidanceId": "adapt-scrollbar-to-contrast-preferences", "status": "open" }, { "id": "T04", "title": "Give reusable regions containment and apply size-aware container queries to cards, navigation, and sidebars.", "priority": 4, "findingIds": [ "F09" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T05", "title": "Add a strong :focus-visible treatment and ensure interactive targets provide at least 24px safe space, preferably 44px for primary touch controls.", "priority": 5, "findingIds": [ "F10" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T06", "title": "Prioritize the LCP resource, cut startup script/CSS cost, and validate LCP below 2.5s on representative mobile hardware.", "priority": 6, "findingIds": [ "F11" ], "guidanceId": "performance", "status": "open" }, { "id": "T07", "title": "Reduce startup dependencies, inline only critical CSS, defer non-critical styles/scripts, and tune preload/fetch priority around the LCP asset.", "priority": 7, "findingIds": [ "F13" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T08", "title": "Give every control a stable accessible name that includes its visible label and preserve native element semantics.", "priority": 8, "findingIds": [ "F15" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T09", "title": "Adjust the green banner and muted-text color tokens to meet 4.5:1 for normal text and 3:1 for large text/UI.", "priority": 9, "findingIds": [ "F16" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T10", "title": "Restore visible :focus-visible styling, keep list children semantic, and ensure focus order follows the visual card order.", "priority": 10, "findingIds": [ "F17" ], "guidanceId": "move-dom-element-without-losing-state", "status": "open" }, { "id": "T11", "title": "Deploy a nonce/hash-based CSP beyond frame-ancestors and set Secure plus an appropriate SameSite value on every HTTPS cookie.", "priority": 11, "findingIds": [ "F22" ], "guidanceId": "security", "status": "open" }, { "id": "T12", "title": "Treat owned CDNs separately but minimize external vendors, gate optional analytics/ads on consent, and batch collection with short retention.", "priority": 12, "findingIds": [ "F23" ], "guidanceId": "privacy", "status": "open" }, { "id": "T13", "title": "Wrap non-essential animation and autoplay behavior in prefers-reduced-motion: no-preference and provide a reduced/static state.", "priority": 13, "findingIds": [ "F01" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T14", "title": "Implement modal flows with dialog and transient menus with popover, including declarative light-dismiss and focus restoration.", "priority": 14, "findingIds": [ "F06" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T15", "title": "Reduce persistent navigation and promotional chrome, prioritize the media grid/player, and progressively disclose secondary categories.", "priority": 15, "findingIds": [ "F07" ], "guidanceId": "overflow-clipping-control", "status": "open" }, { "id": "T16", "title": "Break long tasks into scheduled chunks and defer non-critical feed, consent, and promotional code.", "priority": 16, "findingIds": [ "F12" ], "guidanceId": "break-up-long-tasks", "status": "open" }, { "id": "T17", "title": "Code-split by page capability, remove unused selectors, and load optional feed/player modules only when needed.", "priority": 17, "findingIds": [ "F14" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T18", "title": "Set width/height or aspect-ratio on every thumbnail and serve a closer responsive candidate for each rendered card size.", "priority": 18, "findingIds": [ "F19" ], "guidanceId": "html", "status": "open" }, { "id": "T19", "title": "Publish reciprocal hreflang links for localized equivalents and expose a valid sitemap location in robots.txt.", "priority": 19, "findingIds": [ "F20" ], "guidanceId": "html", "status": "open" }, { "id": "T20", "title": "Add passkey registration and authentication alongside existing methods, requested only after explicit user action.", "priority": 20, "findingIds": [ "F24" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T21", "title": "Add nosniff, a restrictive Referrer-Policy, an allowlist Permissions-Policy, and strengthen CSP/Trusted Types where feasible.", "priority": 21, "findingIds": [ "F25" ], "guidanceId": "security", "status": "open" }, { "id": "T22", "title": "Migrate layout spacing/positioning to logical properties and verify representative RTL locales with dir=rtl.", "priority": 22, "findingIds": [ "F26" ], "guidanceId": "translator", "status": "open" }, { "id": "T23", "title": "Use Intl.NumberFormat with the active locale and compact notation rather than hand-built K/M strings.", "priority": 23, "findingIds": [ "F27" ], "guidanceId": "format-human-readable-durations", "status": "open" }, { "id": "T24", "title": "Synchronize visible validation with aria-invalid, associate messages using aria-describedby, and announce the error summary after submit.", "priority": 24, "findingIds": [ "F28" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T25", "title": "Use autocomplete=email and new-password, native required attributes, and stable input names so password managers and autofill can assist.", "priority": 25, "findingIds": [ "F29" ], "guidanceId": "autofill-sign-up-form", "status": "open" }, { "id": "T26", "title": "Serve closer srcset candidates, lazy-load below-fold media, reserve dimensions, and prefer modern formats throughout.", "priority": 26, "findingIds": [ "F30" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T27", "title": "Defer background/promotion modules, conditionally load page-specific features, and remove unused mobile bundles.", "priority": 27, "findingIds": [ "F31" ], "guidanceId": "efficient-background-processing", "status": "open" }, { "id": "T28", "title": "Set a third-party budget, defer ads/social identity until interaction or consent, and cache/conditionally load heavy media integrations.", "priority": 28, "findingIds": [ "F32" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T29", "title": "Profile feed/card allocations, virtualize or release offscreen items, and conditionally initialize promotional/player modules.", "priority": 29, "findingIds": [ "F33" ], "guidanceId": "defer-rendering-heavy-content", "status": "open" }, { "id": "T30", "title": "Use same-origin cross-document View Transitions for route continuity, with a reduced-motion fallback.", "priority": 30, "findingIds": [ "F03" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T31", "title": "Collapse or soften persistent chrome after scrolling using scroll-state-aware styling while keeping verification accessible.", "priority": 31, "findingIds": [ "F04" ], "guidanceId": "shrinking-header-on-scroll", "status": "open" }, { "id": "T32", "title": "Use CSS anchor positioning and fallback position-try rules for menus and tooltips near viewport edges.", "priority": 32, "findingIds": [ "F05" ], "guidanceId": "position-aware-tooltips", "status": "open" }, { "id": "T33", "title": "Add accurate VideoObject JSON-LD and make Open Graph media MIME declarations match the served asset.", "priority": 33, "findingIds": [ "F21" ], "guidanceId": "html", "status": "open" } ], "budget": { "wallClockSeconds": 1500, "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-23T08-45-22-987Z" }