Resources

Reference

Complete tables of the values a website audit reads — status codes, DNS record types, directives, tags, criteria — each from its primary specification, with what the scan does with every one.

accessibility

autocomplete attribute values

The complete list of autofill field names the HTML standard defines for the autocomplete attribute — name, address, payment, phone, email — with formats, and which a scan infers.

Read
WCAG 2.2 level A success criteria

All 31 WCAG 2.2 success criteria at level A, what each requires in one line, and which ones an automated scan can partly check — and which it cannot test at all.

Read
WCAG 2.2 level AA success criteria

The 24 success criteria WCAG 2.2 adds at level AA — contrast, resize, reflow, focus visible, target size and more — with a one-line summary and what an automated scan can observe.

Read
WAI-ARIA states and properties

Every aria-* attribute defined by WAI-ARIA 1.2 — ten states and thirty-eight properties — what each one expresses, which are deprecated, and what a scan validates.

Read

availability

HTTP 3xx redirect status codes

Every 3xx status code in RFC 9110 — permanent or temporary, whether the method survives, which ones are not redirects at all, and what a scan records for each hop.

Read
HTTP 4xx client error status codes

Every registered 4xx status code, the specification that defines it, what it means, and how a crawl and a link check treat each one — from 400 to 451.

Read
HTTP 5xx server error status codes

Every registered 5xx status code, from 500 to 511, the specification behind each, and how a scan retries, classifies and reports a server error.

Read

dns

DNS record types a website depends on

The DNS record types behind a website and its email — A, AAAA, CNAME, MX, TXT, NS, CAA, DNSSEC and more — with their type numbers, defining RFCs, and which ones a scan queries.

Read

email

SPF mechanisms, modifiers and qualifiers

Every term an SPF record may contain under RFC 7208 — eight mechanisms, two modifiers, four qualifiers — with the DNS lookups each costs and what a scan validates.

Read
DMARC record tags

The eleven tags of a DMARC record under RFC 7489 — required or optional, allowed values, defaults — what a scan validates in each, and what the draft revision changes.

Read

performance

Cache-Control directives

Every Cache-Control directive in RFC 9111, plus immutable and the two stale-* extensions: where each is allowed, what it instructs, and which ones a scan reads.

Read

security

Content-Security-Policy directives

Every directive of CSP Level 3 — fetch, document, navigation, reporting — with what each controls, which directive it falls back to, and which ones a meta tag cannot set.

Read

seo

HTML link relation types (rel values)

Every link type the HTML standard defines for the rel attribute — canonical, preload, icon, nofollow, noopener and more — where each is allowed, and which a scan reads.

Read

Elsewhere on this site