{ "url": "https://m.tabor.ru", "auditedAt": "2026-07-23T10:03:16.134Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of public unauthenticated templates. Authenticated profile, messaging, matching, payment, and account-deletion flows were not accessible without credentials; these exclusions are explicit in paths/report.md.", "page": { "appType": "mpa", "framework": "Server-rendered legacy MPA with small JavaScript bundles", "notes": "Russian mobile dating site. Public surfaces are server-rendered; login/registration are protected by Cloudflare Turnstile." }, "evidenceUsed": [ "screenshot", "dom+css", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "axe-core", "curl" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Landing page at 360x800", "condition": "viewport: 360x800", "findingIds": [ "F-01", "F-05", "F-07", "F-15", "F-17", "F-26", "F-33", "F-36" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Landing page at 1365x768", "condition": "viewport: 1365x768", "findingIds": [ "F-07" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Landing page under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F-01" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "Landing page under increased contrast", "condition": "prefers-contrast: more", "findingIds": [ "F-02" ] }, { "type": "screenshot", "path": "evidence/registration.png", "caption": "Registration promo", "condition": "viewport: 360x800", "findingIds": [ "F-05" ] }, { "type": "screenshot", "path": "evidence/registration-step1.png", "caption": "Registration step 1", "condition": "viewport: 360x800", "findingIds": [ "F-09", "F-17", "F-36" ] }, { "type": "screenshot", "path": "evidence/registration-invalid.png", "caption": "Registration after invalid submit attempt", "condition": "invalid submission", "findingIds": [ "F-09", "F-10", "F-34" ] }, { "type": "screenshot", "path": "evidence/restore.png", "caption": "Password recovery", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/reviews.png", "caption": "Public reviews listing", "condition": "viewport: 360x800", "findingIds": [ "F-04", "F-32" ] }, { "type": "screenshot", "path": "evidence/help.png", "caption": "Help index", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/404.png", "caption": "Real 404 response", "condition": "viewport: 360x800", "findingIds": [ "F-10", "F-30" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered browser view", "condition": "JavaScript enabled" }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler/no-JS view", "condition": "JavaScript disabled" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Landing rendered DOM and CSS", "findingIds": [ "F-01", "F-03", "F-05", "F-06", "F-17", "F-18", "F-19", "F-21", "F-27", "F-31", "F-33" ] }, { "type": "dom", "path": "evidence/registration-dom.json", "caption": "Signup promotion rendered DOM and CSS", "findingIds": [ "F-03", "F-21" ] }, { "type": "dom", "path": "evidence/registration-step1-dom.json", "caption": "Registration form rendered DOM and CSS", "findingIds": [ "F-08", "F-14", "F-16", "F-18", "F-21", "F-22", "F-27", "F-31", "F-35", "F-36" ] }, { "type": "dom", "path": "evidence/reviews-dom.json", "caption": "Reviews rendered DOM", "findingIds": [ "F-03", "F-04", "F-21", "F-24", "F-32" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "Landing metadata, links, and forms probe", "findingIds": [ "F-22", "F-23", "F-24", "F-35" ] }, { "type": "other", "path": "evidence/motion-css.json", "caption": "Reduced-motion animation and CSS probe" }, { "type": "other", "path": "evidence/404-probe.json", "caption": "404 status and content probe", "findingIds": [ "F-10", "F-30" ] }, { "type": "other", "path": "evidence/document-headers.txt", "caption": "Main document response headers", "findingIds": [ "F-23", "F-28" ] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "Mobile overflow, CLS, and long-task observations", "findingIds": [ "F-11" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools load trace" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact trace timings and blocking summary", "findingIds": [ "F-11" ] }, { "type": "har", "path": "evidence/home.har", "caption": "Network HAR", "findingIds": [ "F-12", "F-39" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact request, weight, and third-party summary", "findingIds": [ "F-12", "F-13", "F-26", "F-33", "F-37", "F-38", "F-39" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered content report" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Full Lighthouse report" }, { "type": "other", "path": "evidence/lighthouse-summary.json", "caption": "Selected Lighthouse scores and diagnostics", "findingIds": [ "F-11", "F-13", "F-19", "F-20", "F-22", "F-27", "F-38" ] }, { "type": "other", "path": "evidence/axe.json", "caption": "axe-core accessibility results", "findingIds": [ "F-02", "F-14", "F-15", "F-16", "F-31" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security-header inspection", "findingIds": [ "F-25", "F-28" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie attribute inspection", "findingIds": [ "F-25", "F-26" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin inspection", "findingIds": [ "F-26", "F-33", "F-39" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan" }, { "type": "other", "path": "evidence/images.json", "caption": "Rendered image inspection", "findingIds": [ "F-19", "F-37" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Baseline heap summary" }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "Post-interaction heap summary" }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "Before/after runtime memory metrics" }, { "type": "other", "path": "evidence/ui-probe.json", "caption": "Focus, target, viewport, and CSS capability probe", "findingIds": [ "F-07", "F-08", "F-09", "F-16", "F-18", "F-31", "F-35" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "Script attributes, media, permission, agent, and time probe", "findingIds": [ "F-12", "F-27" ] }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "Service-worker registration and manifest probe", "findingIds": [ "F-29", "F-30" ] }, { "type": "other", "path": "evidence/registration-invalid-probe.json", "caption": "Invalid registration state probe", "findingIds": [ "F-10", "F-34" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Fetched robots.txt", "findingIds": [ "F-22", "F-23" ] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Fetched sitemap index", "findingIds": [ "F-23" ] }, { "type": "other", "path": "evidence/manifest.json", "caption": "Fetched web app manifest", "findingIds": [ "F-29" ] }, { "type": "other", "path": "coverage-manifest.json", "caption": "Atomic audit coverage plan" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Emulated prefers-color-scheme: dark, screenshot comparison, and DOM/CSS inspection", "evidence": "The dark-mode screenshot is pixel-identical in appearance to the light capture; body and form surfaces remain fixed pale cream/white and the DOM CSS contains no color-scheme or prefers-color-scheme rule.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F-01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Emulated reduced motion and queried document animations/CSS", "evidence": "Under prefers-reduced-motion: reduce, getAnimations() returned no active animations; the audited pages use no non-essential motion or auto-advance.", "pathIds": [ "home" ], "artifacts": [ "evidence/motion-css.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Emulated prefers-contrast: more screenshot plus axe color-contrast audit", "evidence": "The prefers-contrast: more capture does not adapt the palette, and axe measured five failures including 1.98:1 for the h1 and 2.49:1 for the cookie button.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-high-contrast.png", "evidence/axe.json" ], "findingIds": [ "F-02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "medium", "method": "Navigated representative MPA routes and inspected page CSS", "evidence": "Navigation among home, registration, recovery, reviews, and help performs abrupt full-document swaps; DOM/CSS inspection found no ::view-transition rules or view-transition-name usage.", "pathIds": [ "home", "signup", "registration", "reviews" ], "artifacts": [ "evidence/home-dom.json", "evidence/registration-dom.json", "evidence/reviews-dom.json" ], "findingIds": [ "F-03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "DOM/CSS inspection and screenshots across long reviews and static pages", "evidence": "No parallax, scrollytelling, entry reveal, carousel, or other scroll-linked motion exists on the audited public templates.", "pathIds": [ "home", "reviews" ], "artifacts": [ "evidence/home-dom.json", "evidence/reviews-dom.json" ], "reason": "There is no scroll-linked effect to implement declaratively." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "DOM/CSS inspection across representative paths", "evidence": "The public unauthenticated templates expose ordinary links/forms only, with no swipe, pull-to-refresh, draggable, snap-carousel, or gesture-driven component.", "pathIds": [ "home", "registration", "reviews" ], "artifacts": [ "evidence/home-dom.json", "evidence/registration-step1-dom.json", "evidence/reviews-dom.json" ], "reason": "No custom gesture interaction is present on the audited surfaces." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "Mobile screenshot and DOM inspection of long listing", "evidence": "The long reviews listing has no sticky context, progress, or scroll-state response; its only menu is at the top while pagination appears after the list.", "pathIds": [ "reviews" ], "artifacts": [ "evidence/reviews.png", "evidence/reviews-dom.json" ], "findingIds": [ "F-04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "DOM inspection across home, registration, recovery, reviews, and help", "evidence": "No tooltip, attached popover, dropdown, or edge-sensitive overlay is exposed on the audited unauthenticated templates.", "pathIds": [ "home", "registration", "reviews" ], "artifacts": [ "evidence/home-dom.json", "evidence/registration-step1-dom.json", "evidence/reviews-dom.json" ], "reason": "There is no anchored overlay whose positioning can be judged." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Visual review and link/heading DOM inspection", "evidence": "Headings, explicit action labels, numbered registration progress, back links, and review pagination identify the current context and next location without ambiguous icon-only navigation.", "pathIds": [ "home", "registration", "reviews" ], "artifacts": [ "evidence/home-mobile.png", "evidence/registration-step1.png", "evidence/reviews.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Initial mobile screenshot and DOM overlay inspection", "evidence": "A fixed cookie banner occupies roughly the bottom 148px of the 800px mobile viewport on load and presents only a prominent Accept action, obscuring app-store/footer content.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/home-mobile.png", "evidence/registration.png", "evidence/home-dom.json" ], "findingIds": [ "F-05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Rendered DOM inspection of the consent surface", "evidence": "The cookie control is a custom inside fixed divs, with no dialog/popover semantics and no light-dismiss or reject action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json" ], "findingIds": [ "F-06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Desktop/mobile screenshots and layout review", "evidence": "The unauthenticated pages are visually sparse and devote nearly all non-consent space to login, registration, help, or review content rather than decorative application chrome.", "pathIds": [ "home", "registration", "reviews" ], "artifacts": [ "evidence/home-desktop.png", "evidence/registration-step1.png", "evidence/reviews.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Mobile layout metrics and screenshots", "evidence": "At 360x800 the layout primitive reported scrollWidth=clientWidth=360 and horizontalOverflowPx=0; mobile screenshots show controls reflowing without clipping.", "pathIds": [ "home", "registration", "reviews" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/home-mobile.png", "evidence/registration-step1.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "CSS capability probe plus desktop/mobile screenshot comparison", "evidence": "CSS inspection found no container queries or logical sizing; at 1365px the login form remains a 244px strip while background panels stretch edge-to-edge, showing no component-level adaptation.", "pathIds": [ "home" ], "artifacts": [ "evidence/ui-probe.json", "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Focus/target-size probe and registration DOM inspection", "evidence": "Every login control, recovery link, and registration field has tabindex=-1, removing the core flows from sequential keyboard navigation; many links are only 14–17px tall and the checkbox is 13x13px.", "pathIds": [ "home", "registration" ], "artifacts": [ "evidence/ui-probe.json", "evidence/registration-step1-dom.json" ], "findingIds": [ "F-08" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport screenshots and heading/action inspection", "evidence": "The first viewport identifies the service as mobile dating and exposes sign-in plus a clearly labelled free-registration action; the signup promo has one explicit next step.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/home-mobile.png", "evidence/registration.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Walked login/signup paths, inspected controls, and attempted empty registration submission", "evidence": "The login and two-step registration journeys cannot be completed with sequential keyboard input because all controls are tabindex=-1; Turnstile also gates both flows and the invalid registration attempt produced no actionable state.", "pathIds": [ "home", "registration" ], "artifacts": [ "evidence/ui-probe.json", "evidence/registration-step1.png", "evidence/registration-invalid.png" ], "findingIds": [ "F-09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Invalid-submit interaction plus 404 screenshot/DOM probe", "evidence": "After accepting consent and attempting an empty registration submission, the page remained unchanged with no :invalid fields, role=alert, aria-invalid, or error text; the 404 tells users to go back but provides no actionable link.", "pathIds": [ "registration", "error404" ], "artifacts": [ "evidence/registration-invalid.png", "evidence/registration-invalid-probe.json", "evidence/404.png", "evidence/404-probe.json" ], "findingIds": [ "F-10" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Mobile Lighthouse plus desktop trace and mobile layout observers", "evidence": "Mobile Lighthouse measured LCP 4.3s and FCP 3.7s, outside the good range, although the local desktop trace was faster at 1.35s and CLS remained low.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-layout-mobile.json" ], "findingIds": [ "F-11" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Lighthouse and first-load layout-shift observer", "evidence": "Observed CLS was 0.037 in Lighthouse and 0.059 in the mobile layout capture, both within the good range; screenshots showed no disruptive content jump.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Lighthouse and DevTools trace summary", "evidence": "Lighthouse TBT was 0ms; the trace found one 84.57ms long task and 34.57ms total blocking time, a light main-thread result.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "HAR summary confirmed against actual head script attributes", "evidence": "Two 300KB+ parser-inserted legacy scripts in have neither async nor defer; HAR recorded 31 requests, seven redirects, and 484KB transferred, with Turnstile alone delaying about 1.39s.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json", "evidence/home.har" ], "findingIds": [ "F-12" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Lighthouse code-coverage diagnostics and HAR weight breakdown", "evidence": "Lighthouse estimates 225KiB of unused JavaScript: 128KB from index.min.js, 54KB from Yandex Metrika, and 48KB from vendor-index.min.js.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F-13" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "axe-core plus rendered DOM inspection", "evidence": "axe reported critical label failures for both login fields, an unnamed tracking link, and missing landmarks; registration fields likewise use nearby text rather than associated