Head and URL False-Positive Fixtures

0 Intentional Issues

A title, a verification tag and a canonical hostname, each correct and each written the way a real stack writes it. Every code here must come back NOT DETECTED.

Title With Optional Tags Omitted
/fp-head-fixtures/title-optional-tags.html
#56 missing_title_tag — NOT DETECTED
No <html>, <head> or <body> tags at all — every one is optional in HTML. The parser builds the head and the <title> is inside it.
Title After a Tag-Manager Snippet
/fp-head-fixtures/title-after-noscript-pixel.html
#56 missing_title_tag — NOT DETECTED
An inline script whose strings contain "<title>", and a pixel <noscript><img></noscript>, both before the real <title> in <head>.
Title in Legacy-CMS Markup
/fp-head-fixtures/title-uppercase-entities.html
#56 missing_title_tag — NOT DETECTED
<TITLE data-rh="true"> in upper case, wrapped across lines, padded with   and carrying character references.
Verified by Meta Tag, Two Owners
/fp-google-verification
#34 meta_name_google — NOT DETECTED
Two google-site-verification tags with different tokens — owner and agency. Judged only when this page is the seed.
Verified by Meta Tag, Legacy Spelling
/fp-head-fixtures/google-verification-legacy-case.html
#34 meta_name_google — NOT DETECTED
<META NAME="Google-Site-Verification" CONTENT=" token "> after the stylesheet. Judged only when this page is the seed.
Verified by HTML File
/fp-google-file-verification
#34 meta_name_google — NOT DETECTED
No meta tag; the property is verified by /google5f3c9a1e7b2d4086.html, which the catalogue counts as passing.
Catalogue says NOT DETECTED. The detector cannot see file verification, so this is expected to be reported and is recorded as a scanner limitation.
One Canonical Hostname
/fp-www-canonical-host
#9 www_vs_non — NOT DETECTED
www. permanently redirects to the apex hostname, in five valid forms: 308, protocol-relative Location, path dropped, explicit default port, and the reverse direction.
Needs a www./apex pair, so it is verified through a local proxy, not on *.workers.dev.

How to verify

node scripts/verify-fixtures/verify-false-positives.mjs — the "Head and URL checks" section. Each case is paired with a control that must still fire: the same bytes with the title or verification tag removed, and a www. host that serves without redirecting.

Part of /false-positive-fixtures.