", "nodeLabel": "We have participated in httpbis working group since HTTP/2 draft-04, which is t…" }, "score": 0.009804, "subItems": { "type": "subitems", "items": [ { "extra": { "type": "url", "value": "https://fonts.gstatic.com/s/ptserif/v19/EJRVQgYoZZY2vCFuvAFWzr-_dSb_.woff2" }, "cause": "Web font loaded" } ] } } ] }, "guidanceLevel": 2 }, "long-tasks": { "id": "long-tasks", "title": "Avoid long main-thread tasks", "description": "Lists the longest tasks on the main thread, useful for identifying worst contributors to input delay. [Learn how to avoid long main-thread tasks](https://web.dev/articles/optimize-long-tasks)", "score": null, "scoreDisplayMode": "notApplicable", "metricSavings": { "TBT": 0 }, "details": { "type": "table", "headings": [ { "key": "url", "valueType": "url", "label": "URL" }, { "key": "startTime", "valueType": "ms", "granularity": 1, "label": "Start Time" }, { "key": "duration", "valueType": "ms", "granularity": 1, "label": "Duration" } ], "items": [], "debugData": { "type": "debugdata", "urls": [], "tasks": [] } }, "guidanceLevel": 1 }, "non-composited-animations": { "id": "non-composited-animations", "title": "Avoid non-composited animations", "description": "Animations which are not composited can be janky and increase CLS. [Learn how to avoid non-composited animations](https://developer.chrome.com/docs/lighthouse/performance/non-composited-animations/)", "score": null, "scoreDisplayMode": "notApplicable", "metricSavings": { "CLS": 0 }, "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "failureReason", "valueType": "text" }, "label": "Element" } ], "items": [] }, "guidanceLevel": 2 }, "unsized-images": { "id": "unsized-images", "title": "Image elements have explicit `width` and `height`", "description": "Set an explicit width and height on image elements to reduce layout shifts and improve CLS. [Learn how to set image dimensions](https://web.dev/articles/optimize-cls#images_without_dimensions)", "score": 1, "scoreDisplayMode": "metricSavings", "metricSavings": { "CLS": 0 }, "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "label": "" }, { "key": "url", "valueType": "url", "label": "URL" } ], "items": [] }, "guidanceLevel": 4 }, "valid-source-maps": { "id": "valid-source-maps", "title": "Page has valid source maps", "description": "Source maps translate minified code to the original source code. This helps developers debug in production. In addition, Lighthouse is able to provide further insights. Consider deploying source maps to take advantage of these benefits. [Learn more about source maps](https://developer.chrome.com/docs/devtools/javascript/source-maps/).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "scriptUrl", "valueType": "url", "subItemsHeading": { "key": "error" }, "label": "URL" }, { "key": "sourceMapUrl", "valueType": "url", "label": "Map URL" } ], "items": [] } }, "csp-xss": { "id": "csp-xss", "title": "Ensure CSP is effective against XSS attacks", "description": "A strong Content Security Policy (CSP) significantly reduces the risk of cross-site scripting (XSS) attacks. [Learn how to use a CSP to prevent XSS](https://developer.chrome.com/docs/lighthouse/best-practices/csp-xss/)", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "directive", "valueType": "code", "subItemsHeading": { "key": "directive" }, "label": "Directive" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "severity": "High", "description": "No CSP found in enforcement mode" } ] } }, "has-hsts": { "id": "has-hsts", "title": "Use a strong HSTS policy", "description": "Deployment of the HSTS header significantly reduces the risk of downgrading HTTP connections and eavesdropping attacks. A rollout in stages, starting with a low max-age is recommended. [Learn more about using a strong HSTS policy.](https://developer.chrome.com/docs/lighthouse/best-practices/has-hsts)", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "directive", "valueType": "code", "subItemsHeading": { "key": "directive" }, "label": "Directive" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "directive": "includeSubDomains", "description": "No `includeSubDomains` directive found", "severity": "Medium" }, { "directive": "preload", "description": "No `preload` directive found", "severity": "Medium" } ] } }, "origin-isolation": { "id": "origin-isolation", "title": "Ensure proper origin isolation with COOP", "description": "The Cross-Origin-Opener-Policy (COOP) can be used to isolate the top-level window from other documents such as pop-ups. [Learn more about deploying the COOP header.](https://web.dev/articles/why-coop-coep#coop)", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "directive", "valueType": "code", "subItemsHeading": { "key": "directive" }, "label": "Directive" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "description": "No COOP header found", "severity": "High" } ] } }, "clickjacking-mitigation": { "id": "clickjacking-mitigation", "title": "Mitigate clickjacking with XFO or CSP", "description": "The `X-Frame-Options` (XFO) header or the `frame-ancestors` directive in the `Content-Security-Policy` (CSP) header control where a page can be embedded. These can mitigate clickjacking attacks by blocking some or all sites from embedding the page. [Learn more about mitigating clickjacking](https://developer.chrome.com/docs/lighthouse/best-practices/clickjacking-mitigation).", "score": null, "scoreDisplayMode": "notApplicable", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [] } }, "trusted-types-xss": { "id": "trusted-types-xss", "title": "Mitigate DOM-based XSS with Trusted Types", "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "severity": "High", "description": "No `Content-Security-Policy` header with Trusted Types directive found" } ] } }, "script-treemap-data": { "id": "script-treemap-data", "title": "Script Treemap Data", "description": "Used for treemap app", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "treemap-data", "nodes": [ { "name": "https://nghttp2.org/javascripts/modernizr-2.0.js", "resourceBytes": 7020, "encodedBytes": 7029, "unusedBytes": 4667 }, { "name": "https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js", "resourceBytes": 92629, "encodedBytes": 33045, "unusedBytes": 56711 }, { "name": "https://nghttp2.org/", "resourceBytes": 423, "encodedBytes": 423, "children": [ { "name": "(inline) !window.jQuery …", "resourceBytes": 110, "unusedBytes": 0 }, { "name": "(inline) (function(){\n …", "resourceBytes": 313, "unusedBytes": 0 } ] }, { "name": "https://nghttp2.org/javascripts/octopress.js", "resourceBytes": 8357, "encodedBytes": 8366, "unusedBytes": 4225 }, { "name": "https://platform.twitter.com/widgets.js", "resourceBytes": 93064, "encodedBytes": 27615, "unusedBytes": 39117 }, { "name": "https://platform.twitter.com/js/button.856debeac157d9669cf51e73a08fbc93.js", "resourceBytes": 7884, "encodedBytes": 2629, "unusedBytes": 3183 } ] } }, "accesskeys": { "id": "accesskeys", "title": "`[accesskey]` values are unique", "description": "Access keys let users quickly focus a part of the page. For proper navigation, each access key must be unique. [Learn more about access keys](https://dequeuniversity.com/rules/axe/4.11/accesskeys).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-allowed-attr": { "id": "aria-allowed-attr", "title": "`[aria-*]` attributes match their roles", "description": "Each ARIA `role` supports a specific subset of `aria-*` attributes. Mismatching these invalidates the `aria-*` attributes. [Learn how to match ARIA attributes to their roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-attr).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-allowed-role": { "id": "aria-allowed-role", "title": "Uses ARIA roles only on compatible elements", "description": "Many HTML elements can only be assigned certain ARIA roles. Using ARIA roles where they are not allowed can interfere with the accessibility of the web page. [Learn more about ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-role).", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "relatedNode", "valueType": "node" }, "label": "Failing Elements" } ], "items": [ { "node": { "type": "node", "lhId": "1-0-FIELDSET", "path": "4,HTML,2,BODY,1,NAV,1,FORM,0,FIELDSET", "selector": "body > nav > form > fieldset", "boundingRect": { "top": 124, "bottom": 149, "left": 214, "right": 394, "width": 180, "height": 25 }, "snippet": "