Manifest position 360 · CrUX rank bucket 1000

https://www.aftonbladet.se

Coverage complete

Coverage-complete report across six representative public paths. Authenticated account actions, paid checkout completion and destructive account actions were not exercised because they require credentials/payment; their public entry surfaces were inspected.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Under emulated prefers-color-scheme: dark, matchMedia was true while the body remained rgb(247,247,247) with dark text and the computed color-scheme was normal. F01 medium: The site exposes a manual theme control but does not follow the system dark preference.
respect-user-preferences `respects-reduced-motion`	issues	high	The reduced-motion evaluate probe confirmed the preference and still found eight running animations, each with a 1,900 ms duration. F02 medium: Animations continue when reduced motion is requested.
respect-user-preferences `respects-contrast`	issues	high	Article Lighthouse found normal text below 4.5:1 in navigation, breadcrumbs and the privacy utility link. F12 medium: Navigation and utility text fail WCAG contrast requirements.
implement-natural-interactions `view-transitions`	issues	medium	The platform probe found no view-transition CSS or authored transition rule across the MPA navigation surface. F03 low: Editorial route changes do not opt into View Transitions.
implement-natural-interactions `scroll-driven-animations`	pass	high	No authored scroll-linked animation was present, no scroll-timeline rules were found, and the layout capture observed no long tasks during the inspection.
implement-natural-interactions `physical-gestures`	pass	high	Carousels expose explicit previous/next controls and the inspected reading/navigation journey did not depend on custom pointer-only gestures.
provide-guided-navigation `scroll-state-aware-chrome`	pass	high	Persistent masthead navigation, section labels and article breadcrumbs maintain orientation across the long editorial surfaces.
provide-guided-navigation `anchored-positioning`	pass	high	No tooltip or edge-positioned popover was required in the exercised journeys; modal surfaces use dialog semantics rather than manually positioned tooltip chrome.
provide-guided-navigation `directs-attention`	pass	high	Section labels, prominent linked cards, search result grouping and the 404 return action clearly indicate where attention moved next.
maximize-content-reduce-noise `no-intrusive-interruptions`	issues	high	Desktop and 360 px screenshots show the cookie settings dialog covering almost the whole viewport before any interaction; mobile controls are pinned over scrollable consent copy. F04 high: A large consent wall obscures all editorial content on every tested primary path.
maximize-content-reduce-noise `semantic-dismissible-primitives`	pass	high	The application exposes a native dialog and form method=dialog for modal dismissal; no ad-hoc transient popover was found in the tested surfaces.
maximize-content-reduce-noise `reduced-chrome`	pass	high	Outside the consent interruption, the templates use compact masthead chrome and devote the page body to linked editorial content.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	The mobile layout reported scrollWidth=clientWidth=360, horizontalOverflowPx=0 and a valid viewport meta tag.
adapt-to-the-form-factor `component-level-responsiveness`	pass	high	The platform probe found eight CSS container rules, and homepage/article compositions reflow from desktop to 360 px without overflow.
adapt-to-the-form-factor `input-modality-aware`	issues	high	The target-size probe found 21 of 75 visible interactive elements below 24 px in at least one dimension, including “Läs mer” at 43×14 and multiple footer links at 18 px high. F06 medium: Many interactive text links have touch areas below the minimum target height.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	The masthead, prominent news cards, section labels and descriptive article title make the publication and reading/discovery actions clear.
support-core-task-success `primary-flow-completion`	pass	high	A populated query returned grouped article, video, podcast and tag results with real destination links; a selected news article rendered its headline and body metadata.
support-core-task-success `clear-system-state-and-recovery`	pass	high	The 404 state clearly says the page cannot be found, shows the failed URL, and provides a prominent return-to-home action.
be-fast-and-stable `good-core-web-vitals`	issues	high	Mobile Lighthouse measured homepage LCP 6.3 s and CLS 0.298; the article also had LCP 6.3 s. The raw-CDP trace corroborated a 5.07 s LCP. F07 high: Primary pages load slowly and the homepage is visually unstable.
be-fast-and-stable `visual-stability`	issues	high	The mobile layout observer measured CLS 0.153 with repeated shifts between 3.3 and 4.1 seconds; Lighthouse measured 0.298 and reported 15 layout shifts. F08 high: Late content and animation cause substantial layout movement on the homepage.
be-fast-and-stable `efficient-main-thread`	pass	high	The trace found one 71.95 ms long task and 21.95 ms TBT; Lighthouse measured 20-30 ms TBT, indicating a responsive main thread despite slow loading.
be-fast-and-stable `efficient-resource-delivery`	issues	high	The HAR captured 131 requests and 1.50 MB transferred. Lighthouse estimated 328 KiB homepage and 924 KiB article cache savings, plus up to 1,070 ms render-blocking savings on the article. F09 high: Critical delivery is delayed by a large dependency graph and weak caching.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse estimated 275 KiB unused JavaScript on the homepage and 182 KiB on the article; CMP, advertising, React and article bundles were leading sources. F10 medium: The initial load ships substantial JavaScript that is unused during the tested journey.
be-inclusive `names-roles-labels`	issues	high	Lighthouse failed the iframe title audit on the homepage, and the image primitive reported 19 images without alt text (some decorative, but not all are clearly suppressed from accessibility APIs). F11 medium: Some embedded and visual content lacks usable accessible names.
be-inclusive `sufficient-contrast`	issues	high	Lighthouse measured white-on-red mobile navigation at 3.9:1 and article breadcrumb red-on-dark at 4.27:1; the data-controller “Läs mer” link had only 2.41:1 contrast against surrounding text. F12 medium: Navigation and utility text fail WCAG contrast requirements.
be-inclusive `structure-and-focus`	issues	high	The homepage has no h1. On the article, #skipNavigation links to #main but the metadata probe found no matching target, and Lighthouse failed the skip-link audit. F13 medium: The heading and skip-link structure is inconsistent across templates.
be-inclusive `legible-text`	pass	high	Headline and body typography remains readable and reflows without clipping at 360 px; no horizontal overflow was measured.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	Reflow and scaling are allowed, but 21 visible controls were below 24 px in at least one dimension. F06 medium: Many interactive text links have touch areas below the minimum target height.
follow-best-practices `no-console-errors`	issues	high	HAR and both Lighthouse runs recorded three HTTP 400 responses from the Schibsted session/user-context endpoints, surfaced as browser console errors. F14 low: Anonymous page loads generate repeated failed session requests and console errors.
follow-best-practices `sound-document-and-assets`	issues	high	The image primitive found 7 images without width/height and 8 oversized images; Lighthouse independently failed its unsized-images audit. F15 medium: Several images do not reserve dimensions and some are oversized for display.
follow-best-practices `browser-platform-hygiene`	pass	high	Best-practices scored 0.96 on both tested templates; no permission prompt, paste prevention or deprecated API misuse surfaced in the exercised paths.
be-discoverable `title-and-description`	pass	high	Homepage and article titles/descriptions are present in rendered DOM and raw server HTML; the article title and description accurately match visible content.
be-discoverable `crawlable-and-mobile-friendly`	issues	high	Lighthouse SEO found one link whose text is only “Läs mer”; otherwise viewport, crawlable hrefs and robots access passed. F16 low: A generic privacy link does not describe its destination.
be-discoverable `canonical-and-indexing-signals`	pass	high	Both representative public pages returned 200; the article has a self-canonical, robots permits indexing, and robots.txt declares current sitemap locations.
be-discoverable `structured-and-shareable-metadata`	pass	high	The article provides matching Open Graph metadata plus BreadcrumbList and NewsArticle JSON-LD with headline, dates, authors, publisher and policy links.
be-private-and-secure `secure-transport-and-headers`	issues	high	The cookie primitive found abx2 without Secure and with SameSite=None for 365 days; _sp_su was Secure but also SameSite=None for 365 days. F17 medium: A long-lived first-party cookie is set without Secure and both observed cookies use SameSite=None.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	The tracker primitive observed 20 third-party origins including ib.adnxs.com. HAR attributed 70 requests and 1.02 MB to third-party origins during the load. F18 medium: The pre-consent page establishes a broad third-party and tracking footprint.
be-private-and-secure `in-context-permissions-and-modern-auth`	pass	high	No permission prompt appeared on load; Permissions-Policy disables most sensitive capabilities and scopes geolocation to self. Account handling is delegated to the Schibsted identity service rather than embedded password fields.
be-private-and-secure `defensive-browser-policies`	pass	high	CSP frame-ancestors, HSTS preload, nosniff, X-Frame-Options DENY, strict-origin referrer policy and a restrictive Permissions-Policy were all present.
be-resilient `progressive-enhancement`	pass	high	Raw HTML retained 89% of homepage and 88% of article content words; neither route was a JS shell and title/description/article h1 survived without JavaScript.
be-resilient `resilient-runtime-behaviour`	pass	high	Dialog surfaces use platform semantics, the narrow viewport has no overflow, search results resolve predictably and no clipped menu blocked the tested journeys.
be-resilient `offline-and-installable`	not-applicable	high	This is a public MPA news publication rather than an app-like task surface; installability is not required for its core reading journey.
be-resilient `network-and-http-failure-states`	pass	high	The unknown route rendered a complete explanatory 404 with a direct route back to the homepage rather than a blank shell or spinner.
be-internationalised `lang-dir-and-logical-properties`	pass	high	The document declares lang=sv, Swedish reading order is correct, and content reflows at 360 px without physical-width overflow.
be-internationalised `locale-aware-data`	pass	high	Swedish date labels are presented to readers while article publication and modification times are exposed as unambiguous ISO datetimes.
be-internationalised `time-zone-correctness`	pass	high	Published and updated values include UTC Z offsets and visible localised clock labels, avoiding ambiguous stored timestamps.
be-trustworthy `no-dark-patterns`	issues	high	The modal gives “Godkänn alla” a filled primary treatment while “Avvisa personanpassad reklam” is outlined and marked “Betaltjänst”; the copy also says rejection costs 49 kr/month on ad-funded services. F05 high: The consent choice architecture makes rejection less clear and labels it as a paid option.
be-trustworthy `humane-error-handling`	not-applicable	high	The audited public search form has no required or destructive fields and therefore no representative invalid-submission error state to exercise.
be-trustworthy `trustworthy-input-assistance`	pass	high	The only public text field is a query input named q; it does not request address, payment, identity or other data that needs a specialised autocomplete token.
be-trustworthy `safe-commercial-and-account-flows`	issues	high	The public consent surface conflates rejection with a paid-services message and does not give accept/reject equal treatment. F05 high: The consent choice architecture makes rejection less clear and labels it as a paid option.
be-sustainable `optimised-assets`	issues	high	The image primitive found 8 oversized images, 6 legacy-format images, 3 without srcset and 4 below-fold images not lazy-loaded. F19 medium: Image delivery still wastes resolution and misses basic loading optimisations.
be-sustainable `no-wasteful-work`	issues	high	The homepage loaded 75 scripts and contacted 20 third-party origins; scripts accounted for 778 KB transferred even while a consent wall prevented interaction with content. F20 medium: The initial page does disproportionate background and third-party work before the reader engages.
be-sustainable `third-party-and-media-budget`	issues	high	Third-party origins transferred 1,017,537 of 1,496,094 bytes (68%) and made 70 of 131 requests; CMP, media, React CDN and ad SDK resources were major contributors. F21 medium: Third-party code dominates the transferred page budget.
be-agent-ready `structured-agent-capabilities`	pass	high	News content is server-rendered and exposes detailed NewsArticle/BreadcrumbList JSON-LD; OAI-SearchBot is allowed while training crawlers are intentionally disallowed by policy.
be-agent-ready `on-device-inference`	not-applicable	high	No core reading or search task requires on-device inference; absence of a built-in model feature is not a failure for this publication surface.
be-memory-efficient `no-leak-under-repeated-interaction`	pass	high	After repeated interaction, self size decreased from 20,251,863 to 19,978,678 bytes and node count decreased from 336,773 to 336,365; no retained-growth signal appeared.
be-memory-efficient `bounded-footprint`	pass	high	The loaded, widget-heavy news homepage retained about 20.0 MB self size; the footprint remained stable after interaction and was proportionate to the rendered feed.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	high	Node count fell after repeated menu/scroll interactions and neither summary exposed a growing Detached* constructor population among retained constructors.

Provenance

Canonical report: results/atomic/reports/0360-www_aftonbladet_se.json
Report SHA-256: a9c7f5fdfbb1a24378e5a84c060dd4018861b5c63db8317ae8727d9c5ac30416
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_aftonbladet_se/2026-07-20T05-38-38-285Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_aftonbladet_se/2026-07-20T05-38-38-285Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.