![\"App](\"/img/home-screenshot.png\")
",
"nodeLabel": "App screenshot"
}
},
{
"url": "https://about.gitea.com/img/SOC2-blue.png",
"node": {
"type": "node",
"lhId": "1-111-IMG",
"path": "1,HTML,1,BODY,0,DIV,0,DIV,18,FOOTER,1,DIV,0,DIV,0,DIV,0,DIV,0,IMG",
"selector": "div.xl:grid > div.space-y-8 > div.flex > img.h-24",
"boundingRect": {
"top": 13467,
"bottom": 13563,
"left": 24,
"right": 121,
"width": 97,
"height": 96
},
"snippet": "![\"SOC](\"/img/SOC2-blue.png\")
",
"nodeLabel": "SOC 2 Type 2 Certified"
}
},
{
"url": "https://about.gitea.com/gitea-text.svg",
"node": {
"type": "node",
"lhId": "1-93-IMG",
"path": "1,HTML,1,BODY,0,DIV,0,DIV,1,DIV,0,HEADER,0,NAV,0,DIV,0,A,0,IMG",
"selector": "nav.mx-auto > div.flex > a.-m-1.5 > img.h-12",
"boundingRect": {
"top": 92,
"bottom": 140,
"left": 24,
"right": 158,
"width": 134,
"height": 48
},
"snippet": "![\"\"](\"/gitea-text.svg\")
",
"nodeLabel": "nav.mx-auto > div.flex > a.-m-1.5 > img.h-12"
}
},
{
"url": "https://about.gitea.com/img/logos/mtk.svg",
"node": {
"type": "node",
"lhId": "1-106-IMG",
"path": "1,HTML,1,BODY,0,DIV,0,DIV,9,DIV,2,DIV,1,DIV,0,FIGURE,1,FIGCAPTION,2,IMG",
"selector": "div.mx-auto > figure.rounded-2xl > figcaption.flex > img.h-10",
"boundingRect": {
"top": 9414,
"bottom": 9454,
"left": 206,
"right": 364,
"width": 158,
"height": 40
},
"snippet": "![\"\"](\"/img/logos/mtk.svg\")
",
"nodeLabel": "div.mx-auto > figure.rounded-2xl > figcaption.flex > img.h-10"
}
}
]
},
"guidanceLevel": 4
},
"valid-source-maps": {
"id": "valid-source-maps",
"title": "Page has valid source maps",
"description": "Source maps translate minified code to the original source code. This helps developers debug in production. In addition, Lighthouse is able to provide further insights. Consider deploying source maps to take advantage of these benefits. [Learn more about source maps](https://developer.chrome.com/docs/devtools/javascript/source-maps/).",
"score": 1,
"scoreDisplayMode": "binary",
"details": {
"type": "table",
"headings": [
{
"key": "scriptUrl",
"valueType": "url",
"subItemsHeading": {
"key": "error"
},
"label": "URL"
},
{
"key": "sourceMapUrl",
"valueType": "url",
"label": "Map URL"
}
],
"items": []
}
},
"csp-xss": {
"id": "csp-xss",
"title": "Ensure CSP is effective against XSS attacks",
"description": "A strong Content Security Policy (CSP) significantly reduces the risk of cross-site scripting (XSS) attacks. [Learn how to use a CSP to prevent XSS](https://developer.chrome.com/docs/lighthouse/best-practices/csp-xss/)",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "directive",
"valueType": "code",
"subItemsHeading": {
"key": "directive"
},
"label": "Directive"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"directive": "script-src",
"description": "Host allowlists can frequently be bypassed. Consider using CSP nonces or hashes instead, along with `'strict-dynamic'` if necessary.",
"severity": "High"
},
{
"severity": "Medium",
"description": "The page contains a CSP defined in a `` tag. Consider moving the CSP to an HTTP header or defining another strict CSP in an HTTP header."
}
]
}
},
"has-hsts": {
"id": "has-hsts",
"title": "Use a strong HSTS policy",
"description": "Deployment of the HSTS header significantly reduces the risk of downgrading HTTP connections and eavesdropping attacks. A rollout in stages, starting with a low max-age is recommended. [Learn more about using a strong HSTS policy.](https://developer.chrome.com/docs/lighthouse/best-practices/has-hsts)",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "directive",
"valueType": "code",
"subItemsHeading": {
"key": "directive"
},
"label": "Directive"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"severity": "High",
"description": "No HSTS header found"
}
]
}
},
"origin-isolation": {
"id": "origin-isolation",
"title": "Ensure proper origin isolation with COOP",
"description": "The Cross-Origin-Opener-Policy (COOP) can be used to isolate the top-level window from other documents such as pop-ups. [Learn more about deploying the COOP header.](https://web.dev/articles/why-coop-coep#coop)",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "directive",
"valueType": "code",
"subItemsHeading": {
"key": "directive"
},
"label": "Directive"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"description": "No COOP header found",
"severity": "High"
}
]
}
},
"clickjacking-mitigation": {
"id": "clickjacking-mitigation",
"title": "Mitigate clickjacking with XFO or CSP",
"description": "The `X-Frame-Options` (XFO) header or the `frame-ancestors` directive in the `Content-Security-Policy` (CSP) header control where a page can be embedded. These can mitigate clickjacking attacks by blocking some or all sites from embedding the page. [Learn more about mitigating clickjacking](https://developer.chrome.com/docs/lighthouse/best-practices/clickjacking-mitigation).",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"severity": "High",
"description": "No frame control policy found"
}
]
}
},
"trusted-types-xss": {
"id": "trusted-types-xss",
"title": "Mitigate DOM-based XSS with Trusted Types",
"description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "description",
"valueType": "text",
"subItemsHeading": {
"key": "description"
},
"label": "Description"
},
{
"key": "severity",
"valueType": "text",
"subItemsHeading": {
"key": "severity"
},
"label": "Severity"
}
],
"items": [
{
"severity": "High",
"description": "No `Content-Security-Policy` header with Trusted Types directive found"
}
]
}
},
"script-treemap-data": {
"id": "script-treemap-data",
"title": "Script Treemap Data",
"description": "Used for treemap app",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "treemap-data",
"nodes": [
{
"name": "https://about.gitea.com/",
"resourceBytes": 1781,
"encodedBytes": 354,
"children": [
{
"name": "(inline) window.__NUXT__…",
"resourceBytes": 1781,
"unusedBytes": 0
}
]
},
{
"name": "https://about.gitea.com/_nuxt/entry.3765936f.js",
"resourceBytes": 234222,
"encodedBytes": 81080,
"unusedBytes": 111909
},
{
"name": "https://about.gitea.com/_nuxt/index.84b60db4.js",
"resourceBytes": 32499,
"encodedBytes": 10127,
"unusedBytes": 1502
},
{
"name": "https://about.gitea.com/_nuxt/cookie.529380eb.js",
"resourceBytes": 3304,
"encodedBytes": 1333,
"unusedBytes": 2157
},
{
"name": "https://about.gitea.com/_nuxt/Footer.fd3f6c22.js",
"resourceBytes": 53423,
"encodedBytes": 17866,
"unusedBytes": 16375
},
{
"name": "https://about.gitea.com/_nuxt/_plugin-vue_export-helper.c27b6911.js",
"resourceBytes": 91,
"encodedBytes": 91,
"unusedBytes": 0
},
{
"name": "https://about.gitea.com/_nuxt/Newsletter.e292cc55.js",
"resourceBytes": 36515,
"encodedBytes": 11029,
"unusedBytes": 15001
},
{
"name": "https://about.gitea.com/_nuxt/cookie.6a18c7a2.js",
"resourceBytes": 9196,
"encodedBytes": 3559,
"unusedBytes": 5719
},
{
"name": "https://about.gitea.com/_nuxt/asyncData.15a86364.js",
"resourceBytes": 11326,
"encodedBytes": 4615,
"unusedBytes": 9894
},
{
"name": "https://about.gitea.com/_nuxt/use-tree-walker.92dce54b.js",
"resourceBytes": 364,
"encodedBytes": 364,
"unusedBytes": 0
},
{
"name": "https://about.gitea.com/_nuxt/PrivacyPolicyLink.2d385212.js",
"resourceBytes": 296,
"encodedBytes": 297,
"unusedBytes": 0
},
{
"name": "https://js.hs-scripts.com/44783791.js",
"resourceBytes": 1617,
"encodedBytes": 650,
"unusedBytes": 0
},
{
"name": "https://www.googletagmanager.com/gtm.js?id=GTM-KW5NFLQL",
"resourceBytes": 423539,
"encodedBytes": 148558,
"unusedBytes": 185505
},
{
"name": "https://www.googletagmanager.com/gtag/js?id=G-FN940L7CL7",
"resourceBytes": 539378,
"encodedBytes": 177289,
"unusedBytes": 220462
},
{
"name": "https://www.googletagmanager.com/gtag/js?id=AW-16517062921&cx=c>m=4e64h1",
"resourceBytes": 438118,
"encodedBytes": 150101,
"unusedBytes": 171169
},
{
"name": "https://www.googletagmanager.com/gtag/js?id=G-FN940L7CL7&cx=c>m=4e64h1",
"resourceBytes": 539389,
"encodedBytes": 177286,
"unusedBytes": 361997
}
]
}
},
"accesskeys": {
"id": "accesskeys",
"title": "`[accesskey]` values are unique",
"description": "Access keys let users quickly focus a part of the page. For proper navigation, each access key must be unique. [Learn more about access keys](https://dequeuniversity.com/rules/axe/4.11/accesskeys).",
"score": null,
"scoreDisplayMode": "notApplicable"
},
"aria-allowed-attr": {
"id": "aria-allowed-attr",
"title": "`[aria-*]` attributes match their roles",
"description": "Each ARIA `role` supports a specific subset of `aria-*` attributes. Mismatching these invalidates the `aria-*` attributes. [Learn how to match ARIA attributes to their roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-attr).",
"score": 1,
"scoreDisplayMode": "binary",
"details": {
"type": "table",
"headings": [
{
"key": "node",
"valueType": "node",
"subItemsHeading": {
"key": "relatedNode",
"valueType": "node"
},
"label": "Failing Elements"
}
],
"items": []
}
},
"aria-allowed-role": {
"id": "aria-allowed-role",
"title": "Uses ARIA roles only on compatible elements",
"description": "Many HTML elements can only be assigned certain ARIA roles. Using ARIA roles where they are not allowed can interfere with the accessibility of the web page. [Learn more about ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-role).",
"score": 1,
"scoreDisplayMode": "informative",
"details": {
"type": "table",
"headings": [
{
"key": "node",
"valueType": "node",
"subItemsHeading": {
"key": "relatedNode",
"valueType": "node"
},
"label": "Failing Elements"
}
],
"items": [
{
"node": {
"type": "node",
"lhId": "1-0-LABEL",
"path": "1,HTML,1,BODY,0,DIV,0,DIV,11,DIV,0,DIV,2,DIV,1,DIV,0,LABEL",
"selector": "div.mx-auto > div.mt-16 > div#headlessui-radiogroup-21 > label#headlessui-label-22",
"boundingRect": {
"top": 11077,
"bottom": 11078,
"left": 89,
"right": 90,
"width": 1,
"height": 1
},
"snippet": "