", "nodeLabel": "PHP can be hardened manually as well as with patching protocols. Below we highl…" }, "score": 0.005127, "subItems": { "type": "subitems", "items": [ { "extra": { "type": "url", "value": "https://www.hardened-php.net/wp-content/themes/twentytwelve/fonts/open-sans/open-sans-latin-400-normal.woff2?ver=34" }, "cause": "Web font loaded" }, { "extra": { "type": "url", "value": "https://www.hardened-php.net/wp-content/themes/twentytwelve/fonts/open-sans/open-sans-latin-700-normal.woff2?ver=34" }, "cause": "Web font loaded" } ] } } ] }, "guidanceLevel": 2 }, "long-tasks": { "id": "long-tasks", "title": "Avoid long main-thread tasks", "description": "Lists the longest tasks on the main thread, useful for identifying worst contributors to input delay. [Learn how to avoid long main-thread tasks](https://web.dev/articles/optimize-long-tasks)", "score": null, "scoreDisplayMode": "notApplicable", "metricSavings": { "TBT": 0 }, "details": { "type": "table", "headings": [ { "key": "url", "valueType": "url", "label": "URL" }, { "key": "startTime", "valueType": "ms", "granularity": 1, "label": "Start Time" }, { "key": "duration", "valueType": "ms", "granularity": 1, "label": "Duration" } ], "items": [], "debugData": { "type": "debugdata", "urls": [], "tasks": [] } }, "guidanceLevel": 1 }, "non-composited-animations": { "id": "non-composited-animations", "title": "Avoid non-composited animations", "description": "Animations which are not composited can be janky and increase CLS. [Learn how to avoid non-composited animations](https://developer.chrome.com/docs/lighthouse/performance/non-composited-animations/)", "score": null, "scoreDisplayMode": "notApplicable", "metricSavings": { "CLS": 0 }, "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "failureReason", "valueType": "text" }, "label": "Element" } ], "items": [] }, "guidanceLevel": 2 }, "unsized-images": { "id": "unsized-images", "title": "Image elements have explicit `width` and `height`", "description": "Set an explicit width and height on image elements to reduce layout shifts and improve CLS. [Learn how to set image dimensions](https://web.dev/articles/optimize-cls#images_without_dimensions)", "score": 1, "scoreDisplayMode": "metricSavings", "metricSavings": { "CLS": 0 }, "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "label": "" }, { "key": "url", "valueType": "url", "label": "URL" } ], "items": [] }, "guidanceLevel": 4 }, "valid-source-maps": { "id": "valid-source-maps", "title": "Page has valid source maps", "description": "Source maps translate minified code to the original source code. This helps developers debug in production. In addition, Lighthouse is able to provide further insights. Consider deploying source maps to take advantage of these benefits. [Learn more about source maps](https://developer.chrome.com/docs/devtools/javascript/source-maps/).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "scriptUrl", "valueType": "url", "subItemsHeading": { "key": "error" }, "label": "URL" }, { "key": "sourceMapUrl", "valueType": "url", "label": "Map URL" } ], "items": [] } }, "csp-xss": { "id": "csp-xss", "title": "Ensure CSP is effective against XSS attacks", "description": "A strong Content Security Policy (CSP) significantly reduces the risk of cross-site scripting (XSS) attacks. [Learn how to use a CSP to prevent XSS](https://developer.chrome.com/docs/lighthouse/best-practices/csp-xss/)", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "directive", "valueType": "code", "subItemsHeading": { "key": "directive" }, "label": "Directive" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "severity": "High", "description": "No CSP found in enforcement mode" } ] } }, "has-hsts": { "id": "has-hsts", "title": "Use a strong HSTS policy", "description": "Deployment of the HSTS header significantly reduces the risk of downgrading HTTP connections and eavesdropping attacks. A rollout in stages, starting with a low max-age is recommended. [Learn more about using a strong HSTS policy.](https://developer.chrome.com/docs/lighthouse/best-practices/has-hsts)", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "directive", "valueType": "code", "subItemsHeading": { "key": "directive" }, "label": "Directive" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "severity": "High", "description": "No HSTS header found" } ] } }, "origin-isolation": { "id": "origin-isolation", "title": "Ensure proper origin isolation with COOP", "description": "The Cross-Origin-Opener-Policy (COOP) can be used to isolate the top-level window from other documents such as pop-ups. [Learn more about deploying the COOP header.](https://web.dev/articles/why-coop-coep#coop)", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "directive", "valueType": "code", "subItemsHeading": { "key": "directive" }, "label": "Directive" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "description": "No COOP header found", "severity": "High" } ] } }, "clickjacking-mitigation": { "id": "clickjacking-mitigation", "title": "Mitigate clickjacking with XFO or CSP", "description": "The `X-Frame-Options` (XFO) header or the `frame-ancestors` directive in the `Content-Security-Policy` (CSP) header control where a page can be embedded. These can mitigate clickjacking attacks by blocking some or all sites from embedding the page. [Learn more about mitigating clickjacking](https://developer.chrome.com/docs/lighthouse/best-practices/clickjacking-mitigation).", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "severity": "High", "description": "No frame control policy found" } ] } }, "trusted-types-xss": { "id": "trusted-types-xss", "title": "Mitigate DOM-based XSS with Trusted Types", "description": "The `require-trusted-types-for` directive in the `Content-Security-Policy` (CSP) header instructs user agents to control the data passed to DOM XSS sink functions. [Learn more about mitigating DOM-based XSS with Trusted Types](https://developer.chrome.com/docs/lighthouse/best-practices/trusted-types-xss).", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "table", "headings": [ { "key": "description", "valueType": "text", "subItemsHeading": { "key": "description" }, "label": "Description" }, { "key": "severity", "valueType": "text", "subItemsHeading": { "key": "severity" }, "label": "Severity" } ], "items": [ { "severity": "High", "description": "No `Content-Security-Policy` header with Trusted Types directive found" } ] } }, "script-treemap-data": { "id": "script-treemap-data", "title": "Script Treemap Data", "description": "Used for treemap app", "score": 1, "scoreDisplayMode": "informative", "details": { "type": "treemap-data", "nodes": [ { "name": "https://www.hardened-php.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1", "resourceBytes": 87553, "encodedBytes": 29633, "unusedBytes": 59976 }, { "name": "https://www.hardened-php.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1", "resourceBytes": 13577, "encodedBytes": 4686, "unusedBytes": 6391 }, { "name": "https://www.hardened-php.net/", "resourceBytes": 2999, "encodedBytes": 831, "unusedBytes": 1292, "children": [ { "name": "(inline) /* `", "description": "Assistive technologies, like screen readers, work inconsistently when `aria-hidden=\"true\"` is set on the document `
`. [Learn how `aria-hidden` affects the document body](https://dequeuniversity.com/rules/axe/4.11/aria-hidden-body).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "relatedNode", "valueType": "node" }, "label": "Failing Elements" } ], "items": [] } }, "aria-hidden-focus": { "id": "aria-hidden-focus", "title": "`[aria-hidden=\"true\"]` elements do not contain focusable descendents", "description": "Focusable descendents within an `[aria-hidden=\"true\"]` element prevent those interactive elements from being available to users of assistive technologies like screen readers. [Learn how `aria-hidden` affects focusable elements](https://dequeuniversity.com/rules/axe/4.11/aria-hidden-focus).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-input-field-name": { "id": "aria-input-field-name", "title": "ARIA input fields have accessible names", "description": "When an input field doesn't have an accessible name, screen readers announce it with a generic name, making it unusable for users who rely on screen readers. [Learn more about input field labels](https://dequeuniversity.com/rules/axe/4.11/aria-input-field-name).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-meter-name": { "id": "aria-meter-name", "title": "ARIA `meter` elements have accessible names", "description": "When a meter element doesn't have an accessible name, screen readers announce it with a generic name, making it unusable for users who rely on screen readers. [Learn how to name `meter` elements](https://dequeuniversity.com/rules/axe/4.11/aria-meter-name).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-progressbar-name": { "id": "aria-progressbar-name", "title": "ARIA `progressbar` elements have accessible names", "description": "When a `progressbar` element doesn't have an accessible name, screen readers announce it with a generic name, making it unusable for users who rely on screen readers. [Learn how to label `progressbar` elements](https://dequeuniversity.com/rules/axe/4.11/aria-progressbar-name).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-prohibited-attr": { "id": "aria-prohibited-attr", "title": "Elements use only permitted ARIA attributes", "description": "Using ARIA attributes in roles where they are prohibited can mean that important information is not communicated to users of assistive technologies. [Learn more about prohibited ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-prohibited-attr).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-required-attr": { "id": "aria-required-attr", "title": "`[role]`s have all required `[aria-*]` attributes", "description": "Some ARIA roles have required attributes that describe the state of the element to screen readers. [Learn more about roles and required attributes](https://dequeuniversity.com/rules/axe/4.11/aria-required-attr).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "relatedNode", "valueType": "node" }, "label": "Failing Elements" } ], "items": [] } }, "aria-required-children": { "id": "aria-required-children", "title": "Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required children.", "description": "Some ARIA parent roles must contain specific child roles to perform their intended accessibility functions. [Learn more about roles and required children elements](https://dequeuniversity.com/rules/axe/4.11/aria-required-children).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-required-parent": { "id": "aria-required-parent", "title": "`[role]`s are contained by their required parent element", "description": "Some ARIA child roles must be contained by specific parent roles to properly perform their intended accessibility functions. [Learn more about ARIA roles and required parent element](https://dequeuniversity.com/rules/axe/4.11/aria-required-parent).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-roles": { "id": "aria-roles", "title": "`[role]` values are valid", "description": "ARIA roles must have valid values in order to perform their intended accessibility functions. [Learn more about valid ARIA roles](https://dequeuniversity.com/rules/axe/4.11/aria-roles).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "relatedNode", "valueType": "node" }, "label": "Failing Elements" } ], "items": [] } }, "aria-text": { "id": "aria-text", "title": "Elements with the `role=text` attribute do not have focusable descendents.", "description": "Adding `role=text` around a text node split by markup enables VoiceOver to treat it as one phrase, but the element's focusable descendents will not be announced. [Learn more about the `role=text` attribute](https://dequeuniversity.com/rules/axe/4.11/aria-text).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-toggle-field-name": { "id": "aria-toggle-field-name", "title": "ARIA toggle fields have accessible names", "description": "When a toggle field doesn't have an accessible name, screen readers announce it with a generic name, making it unusable for users who rely on screen readers. [Learn more about toggle fields](https://dequeuniversity.com/rules/axe/4.11/aria-toggle-field-name).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-tooltip-name": { "id": "aria-tooltip-name", "title": "ARIA `tooltip` elements have accessible names", "description": "When a tooltip element doesn't have an accessible name, screen readers announce it with a generic name, making it unusable for users who rely on screen readers. [Learn how to name `tooltip` elements](https://dequeuniversity.com/rules/axe/4.11/aria-tooltip-name).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-treeitem-name": { "id": "aria-treeitem-name", "title": "ARIA `treeitem` elements have accessible names", "description": "When a `treeitem` element doesn't have an accessible name, screen readers announce it with a generic name, making it unusable for users who rely on screen readers. [Learn more about labeling `treeitem` elements](https://dequeuniversity.com/rules/axe/4.11/aria-treeitem-name).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-valid-attr-value": { "id": "aria-valid-attr-value", "title": "`[aria-*]` attributes have valid values", "description": "Assistive technologies, like screen readers, can't interpret ARIA attributes with invalid values. [Learn more about valid values for ARIA attributes](https://dequeuniversity.com/rules/axe/4.11/aria-valid-attr-value).", "score": null, "scoreDisplayMode": "notApplicable" }, "aria-valid-attr": { "id": "aria-valid-attr", "title": "`[aria-*]` attributes are valid and not misspelled", "description": "Assistive technologies, like screen readers, can't interpret ARIA attributes with invalid names. [Learn more about valid ARIA attributes](https://dequeuniversity.com/rules/axe/4.11/aria-valid-attr).", "score": null, "scoreDisplayMode": "notApplicable" }, "button-name": { "id": "button-name", "title": "Buttons have an accessible name", "description": "When a button doesn't have an accessible name, screen readers announce it as \"button\", making it unusable for users who rely on screen readers. [Learn how to make buttons more accessible](https://dequeuniversity.com/rules/axe/4.11/button-name).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "relatedNode", "valueType": "node" }, "label": "Failing Elements" } ], "items": [] } }, "bypass": { "id": "bypass", "title": "The page contains a heading, skip link, or landmark region", "description": "Adding ways to bypass repetitive content lets keyboard users navigate the page more efficiently. [Learn more about bypass blocks](https://dequeuniversity.com/rules/axe/4.11/bypass).", "score": null, "scoreDisplayMode": "notApplicable" }, "color-contrast": { "id": "color-contrast", "title": "Background and foreground colors have a sufficient contrast ratio", "description": "Low-contrast text is difficult or impossible for many users to read. [Learn how to provide sufficient color contrast](https://dequeuniversity.com/rules/axe/4.11/color-contrast).", "score": 1, "scoreDisplayMode": "binary", "details": { "type": "table", "headings": [ { "key": "node", "valueType": "node", "subItemsHeading": { "key": "relatedNode", "valueType": "node" }, "label": "Failing Elements" } ], "items": [] } }, "definition-list": { "id": "definition-list", "title": "`