← All runs
https://qa-bugs.lab980.com
page
started 2026-08-02 00:59 UTC
·
finished 2026-08-02 00:59 UTC
·
1 page
·
30s scan
·
status done
·
#c4f8198035e745b889c181f51660979c
1 critical
5 serious
2 moderate
3 minor
3 info
14 distinct issues
Grouped by rule across all scanned pages, worst severity first. Click the severity pills above to filter.
All issues are hidden by the severity filter — click the pills above to re-enable tiers.
critical
wcag
button-name
1 page
Buttons must have discernible text
Ensure buttons have discernible text https://dequeuniversity.com/rules/axe/4.10/button-name?application=axeAPI
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "critical",
"title": "Buttons must have discernible text",
"evidence": {
"impact": "critical",
"nodes": [
{
"selector": "button[data-testid=\"nav-dashboard\"]",
"snippet": "<button data-testid=\"nav-dashboard\"></button>"
},
{
"selector": "button[data-testid=\"nav-login\"]",
"snippet": "<button data-testid=\"nav-login\"></button>"
},
{
"selector": "button[data-testid=\"nav-forms\"]",
"snippet": "<button data-testid=\"nav-forms\"></button>"
},
{
"selector": "button[data-testid=\"nav-grid\"]",
"snippet": "<button data-testid=\"nav-grid\"></button>"
},
{
"selector": "button[data-testid=\"nav-async\"]",
"snippet": "<button data-testid=\"nav-async\"></button>"
}
],
"node_count": 5,
"tags": [
"cat.name-role-value",
"wcag2a",
"wcag412",
"section508",
"section508.22.a",
"TTv5",
"TT6.a",
"EN-301-549",
"EN-9.4.1.2",
"ACT"
]
}
}
]
serious
wcag
color-contrast
1 page
Elements must meet minimum color contrast ratio thresholds
Ensure the contrast between foreground and background colors meets WCAG 2 AA minimum contrast ratio thresholds https://dequeuniversity.com/rules/axe/4.10/color-contrast?application=axeAPI
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "serious",
"title": "Elements must meet minimum color contrast ratio thresholds",
"evidence": {
"impact": "serious",
"nodes": [
{
"selector": "h1",
"snippet": "<h1 data-testid=\"app-title\">QA KSink Site</h1>"
}
],
"node_count": 1,
"tags": [
"cat.color",
"wcag2aa",
"wcag143",
"TTv5",
"TT13.c",
"EN-301-549",
"EN-9.1.4.3",
"ACT"
]
}
}
]
serious
wcag
html-has-lang
1 page
<html> element must have a lang attribute
Ensure every HTML document has a lang attribute https://dequeuniversity.com/rules/axe/4.10/html-has-lang?application=axeAPI
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "serious",
"title": "<html> element must have a lang attribute",
"evidence": {
"impact": "serious",
"nodes": [
{
"selector": "html",
"snippet": "<html>"
}
],
"node_count": 1,
"tags": [
"cat.language",
"wcag2a",
"wcag311",
"TTv5",
"TT11.a",
"EN-301-549",
"EN-9.3.1.1",
"ACT"
]
}
}
]
serious
security
missing-csp
1 page
Missing Content-Security-Policy header
No Content-Security-Policy header was present, leaving the page without a script-injection safety net.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "serious",
"title": "Missing Content-Security-Policy header",
"evidence": {
"header": "content-security-policy",
"present": false
}
}
]
serious
security
missing-hsts
1 page
Missing Strict-Transport-Security header
This HTTPS page does not send Strict-Transport-Security, so browsers won't enforce HTTPS on subsequent visits.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "serious",
"title": "Missing Strict-Transport-Security header",
"evidence": {
"header": "strict-transport-security",
"present": false
}
}
]
serious
wcag
wcag/1.4.3
1 page
Insufficient color contrast on page text/UI elements
Low-vision users and users in bright-light conditions may be unable to read text or distinguish UI components (e.g., nav buttons, headings, article text) if contrast ratio falls below 4.5:1 for normal text or 3:1 for large text/UI components. Without direct rendering access, this cannot be fully confirmed, but the flag indicates measured contrast failures. Fix: verify actual foreground/background color pairs for header nav buttons, h1/h2 headings, and article text against WCAG contrast thresholds, and adjust colors (e.g., darken text or lighten background) to meet minimum ratios.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "serious",
"title": "Insufficient color contrast on page text/UI elements",
"evidence": {
"selector": "header nav button, h1, h2, article",
"note": "Cannot visually confirm exact colors from skeleton alone; recommend automated contrast checker (e.g., axe, Lighthouse) run against rendered page to pinpoint exact failing elements."
}
}
]
moderate
security
missing-frame-protection
1 page
Missing clickjacking protection
Neither X-Frame-Options nor a CSP frame-ancestors directive is present, so the page can be framed by another site.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "moderate",
"title": "Missing clickjacking protection",
"evidence": {
"x-frame-options": null,
"csp_frame_ancestors": false
}
}
]
moderate
ux
ux/lighthouse/accessibility
1 page
Lighthouse Accessibility score: 0.56
Lighthouse category 'Accessibility' scored 0.56 (0-1 scale).
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "moderate",
"title": "Lighthouse Accessibility score: 0.56",
"evidence": {
"category": "accessibility",
"score": 0.56
}
}
]
minor
security
missing-referrer-policy
1 page
Missing Referrer-Policy header
No Referrer-Policy header was present, so the browser's default (often permissive) referrer behavior applies.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "minor",
"title": "Missing Referrer-Policy header",
"evidence": {
"header": "referrer-policy",
"present": false
}
}
]
minor
security
missing-xcto
1 page
Missing X-Content-Type-Options: nosniff
Without 'nosniff', browsers may MIME-sniff responses in ways that enable content-type confusion attacks.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "minor",
"title": "Missing X-Content-Type-Options: nosniff",
"evidence": {
"header": "x-content-type-options",
"value": null
}
}
]
minor
security
server-version-disclosure
1 page
Server header discloses version information
The server header ('nginx/1.24.0 (Ubuntu)') discloses software/version details useful for targeting known vulnerabilities.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "minor",
"title": "Server header discloses version information",
"evidence": {
"header": "server",
"value": "nginx/1.24.0 (Ubuntu)"
}
}
]
info
security
missing-permissions-policy
1 page
Missing Permissions-Policy header
No Permissions-Policy header was present to restrict access to powerful browser features.
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "info",
"title": "Missing Permissions-Policy header",
"evidence": {
"header": "permissions-policy",
"present": false
}
}
]
info
ux
ux/lighthouse/best-practices
1 page
Lighthouse Best Practices score: 1
Lighthouse category 'Best Practices' scored 1 (0-1 scale).
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "info",
"title": "Lighthouse Best Practices score: 1",
"evidence": {
"category": "best-practices",
"score": 1
}
}
]
info
ux
ux/lighthouse/performance
1 page
Lighthouse Performance score: 1
Lighthouse category 'Performance' scored 1 (0-1 scale).
Affected pages (1)
Raw evidence (JSON)
[
{
"url": "https://qa-bugs.lab980.com",
"severity": "info",
"title": "Lighthouse Performance score: 1",
"evidence": {
"category": "performance",
"score": 1
}
}
]