![\"Fraunhofer](\"/content/dam/zv/fhg.svg\")
",
"nodeLabel": "Fraunhofer Homepage"
}
}
]
},
"guidanceLevel": 4
},
"valid-source-maps": {
"id": "valid-source-maps",
"title": "Missing source maps for large first-party JavaScript",
"description": "Source maps translate minified code to the original source code. This helps developers debug in production. In addition, Lighthouse is able to provide further insights. Consider deploying source maps to take advantage of these benefits. [Learn more about source maps](https://developer.chrome.com/docs/devtools/javascript/source-maps/).",
"score": 0,
"scoreDisplayMode": "binary",
"details": {
"type": "table",
"headings": [
{
"key": "scriptUrl",
"valueType": "url",
"subItemsHeading": {
"key": "error"
},
"label": "URL"
},
{
"key": "sourceMapUrl",
"valueType": "url",
"label": "Map URL"
}
],
"items": [
{
"scriptUrl": "https://www.fraunhofer.de/static/js/thirdparty/node_modules/resources/videojs/core/alt/video.novtt.min.js",
"subItems": {
"type": "subitems",
"items": [
{
"error": "Large JavaScript file is missing a source map"
}
]
}
}
]
}
},
"csp-xss": {
"id": "csp-xss",
"title": "Ensure CSP is effective against XSS attacks",
"description": "A strong Content Security Policy (CSP) significantly reduces the risk of cross-site scripting (XSS) attacks. [Learn how to use a CSP to prevent XSS](https://developer.chrome.com/docs/lighthouse/best-practices/csp-xss/)",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "directive",
"valueType": "code",
"subItemsHeading": {
"key": "directive"
},
"label": "Directive"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"directive": "script-src",
"description": "`script-src` directive is missing. This can allow the execution of unsafe scripts.",
"severity": "High"
},
{
"directive": "object-src",
"description": "Missing `object-src` allows the injection of plugins that execute unsafe scripts. Consider setting `object-src` to `'none'` if you can.",
"severity": "High"
}
]
}
},
"has-hsts": {
"id": "has-hsts",
"title": "Use a strong HSTS policy",
"description": "Deployment of the HSTS header significantly reduces the risk of downgrading HTTP connections and eavesdropping attacks. A rollout in stages, starting with a low max-age is recommended. [Learn more about using a strong HSTS policy.](https://developer.chrome.com/docs/lighthouse/best-practices/has-hsts)",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "directive",
"valueType": "code",
"subItemsHeading": {
"key": "directive"
},
"label": "Directive"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"directive": "includeSubDomains",
"description": "No `includeSubDomains` directive found",
"severity": "Medium"
},
{
"directive": "preload",
"description": "No `preload` directive found",
"severity": "Medium"
}
]
}
},
"origin-isolation": {
"id": "origin-isolation",
"title": "Ensure proper origin isolation with COOP",
"description": "The Cross-Origin-Opener-Policy (COOP) can be used to isolate the top-level window from other documents such as pop-ups. [Learn more about deploying the COOP header.](https://web.dev/articles/why-coop-coep#coop)",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "directive",
"valueType": "code",
"subItemsHeading": {
"key": "directive"
},
"label": "Directive"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"description": "No COOP header found",
"severity": "High"
}
]
}
},
"clickjacking-mitigation": {
"id": "clickjacking-mitigation",
"title": "Mitigate clickjacking with XFO or CSP",
"description": "The `X-Frame-Options` (XFO) header or the `frame-ancestors` directive in the `Content-Security-Policy` (CSP) header control where a page can be embedded. These can mitigate clickjacking attacks by blocking some or all sites from embedding the page. [Learn more about mitigating clickjacking](https://developer.chrome.com/docs/lighthouse/best-practices/clickjacking-mitigation).",
"score": null,
"scoreDisplayMode": "notApplicable",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": []
}
},
"trusted-types-xss": {
"id": "trusted-types-xss",
"title": "Mitigate DOM-based XSS with Trusted Types",
"description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"severity": "High",
"description": "No `Content-Security-Policy` header with Trusted Types directive found"
}
]
}
},
"script-treemap-data": {
"id": "script-treemap-data",
"title": "Script Treemap Data",
"description": "Used for treemap app",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "treemap-data",
"nodes": [
{
"name": "https://www.fraunhofer.de/etc.clientlibs/fraunhofer/ui/website/js/thirdparty/requirejs.min.js",
"resourceBytes": 15362,
"encodedBytes": 15371,
"unusedBytes": 3510
},
{
"name": "https://www.fraunhofer.de/etc.clientlibs/fraunhofer/ui/website/js/fraunhofer.min.js",
"resourceBytes": 231653,
"encodedBytes": 231928,
"unusedBytes": 187358
},
{
"name": "https://www.fraunhofer.de/",
"resourceBytes": 217,
"encodedBytes": 29,
"children": [
{
"name": "(inline) (function(d,s){…",
"resourceBytes": 217,
"unusedBytes": 0
}
]
},
{
"name": "https://c.leadlab.click/9dfaeaa6c1aea0f8.js",
"resourceBytes": 23866,
"encodedBytes": 6389,
"unusedBytes": 9548
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/jquery/dist/jquery.min.js",
"resourceBytes": 89501,
"encodedBytes": 89591,
"unusedBytes": 34745
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/jquery-placeholder/jquery.placeholder.min.js",
"resourceBytes": 3187,
"encodedBytes": 3196,
"unusedBytes": 2474
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/jquery-bridget/jquery.bridget.min.js",
"resourceBytes": 1604,
"encodedBytes": 1613,
"unusedBytes": 916
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/validatejs.min.js",
"resourceBytes": 7654,
"encodedBytes": 7663,
"unusedBytes": 4602
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/picturefill/dist/picturefill.min.js",
"resourceBytes": 7707,
"encodedBytes": 7725,
"unusedBytes": 6605
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/masonry/dist/masonry.pkgd.min.js",
"resourceBytes": 24103,
"encodedBytes": 24130,
"unusedBytes": 17031
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/jQuery.dotdotdot/src/jquery.dotdotdot.min.js",
"resourceBytes": 6830,
"encodedBytes": 6852,
"unusedBytes": 1334
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/truncate/dist/truncate.min.js",
"resourceBytes": 4230,
"encodedBytes": 4250,
"unusedBytes": 1655
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/bootstrap/js/transition.min.js",
"resourceBytes": 1351,
"encodedBytes": 1360,
"unusedBytes": 308
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/owl.carousel/dist/owl.carousel.min.js",
"resourceBytes": 44342,
"encodedBytes": 44405,
"unusedBytes": 16347
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/node_modules/resources/videojs/core/alt/video.novtt.min.js",
"resourceBytes": 640207,
"encodedBytes": 644652,
"unusedBytes": 568945
},
{
"name": "https://www.fraunhofer.de/static/js/thirdparty/bower_components/resources/25.1.1.0/bootstrap/js/collapse.min.js",
"resourceBytes": 4665,
"encodedBytes": 4674,
"unusedBytes": 3740
}
]
}
},
"accesskeys": {
"id": "accesskeys",
"title": "`[accesskey]` values are unique",
"description": "Access keys let users quickly focus a part of the page. For proper navigation, each access key must be unique. [Learn more about access keys](https://dequeuniversity.com/rules/axe/4.11/accesskeys).",
"score": null,
"scoreDisplayMode": "notApplicable"
},
"aria-allowed-attr": {
"id": "aria-allowed-attr",
"title": "`[aria-*]` attributes match their roles",
"description": "Each ARIA `role` supports a specific subset of `aria-*` attributes. Mismatching these invalidates the `aria-*` attributes. [Learn how to match ARIA attributes to their roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-attr).",
"score": null,
"scoreDisplayMode": "notApplicable"
},
"aria-allowed-role": {
"id": "aria-allowed-role",
"title": "Uses ARIA roles only on compatible elements",
"description": "Many HTML elements can only be assigned certain ARIA roles. Using ARIA roles where they are not allowed can interfere with the accessibility of the web page. [Learn more about ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-role).",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "node",
"valueType": "node",
"subItemsHeading": {
"key": "relatedNode",
"valueType": "node"
},
"label": "Failing Elements"
}
],
"items": [
{
"node": {
"type": "node",
"lhId": "1-121-BUTTON",
"path": "1,HTML,1,BODY,0,DIV,0,HEADER,2,DIV,0,DIV,0,DIV,1,DIV,0,BUTTON",
"selector": "div.fhg-stage-slider > div.frames > div.owl-nav > button.owl-prev",
"boundingRect": {
"top": 0,
"bottom": 0,
"left": 0,
"right": 0,
"width": 0,
"height": 0
},
"snippet": "