ASP.NET.xml

<?xml version="1.0" encoding="utf-8" ?>
<checklist>
  <category name="Best practices">
    <rule name="Fix broken links">
      <link url="http://validator.w3.org/checklink">W3C link checker</link>
      <link url="http://iwebtool.com/broken_link_checker">iWebTool Broken Link Checker</link>
    </rule>
    <rule name="Spell-check" />
    <rule name="Check website in all browsers">
      <link url="http://browsershots.org/">BrowserShots.org</link>
      <link url="https://browserling.com/">Browserling.com</link>
      <link url="http://spoon.net/browsers">Spoon.net</link>
    </rule>
    <rule name="Remove 'www' subdomain">
      <link url="http://no-www.org/verify.php">no-www.org score of 'B'</link>
      <link url="http://keyvan.io/remove-www-prefix-from-urls-with-url-rewrite-module-for-iis-7-0">Remove 'www' in web.config</link>
    </rule>
  </category>

  <category name="Mobile">
    <rule name="MobileOK score of 75+">
      <link url="http://validator.w3.org/mobile/">W3C mobile checker</link>
    </rule>
    <rule name="Use 'viewport' meta-tag">
      <link url="http://webdesign.tutsplus.com/tutorials/htmlcss-tutorials/quick-tip-dont-forget-the-viewport-meta-tag/">Don’t Forget the Viewport Meta Tag</link>
      <link url="http://www.hanselman.com/blog/MakeYourWebsiteMobileAndIPhoneFriendlyAddHomeScreenIPhoneIconsAndAdjustTheViewPort.aspx">Make your website mobile friendly</link>
    </rule>
    <rule name="Use correct input types">
      <link url="http://html5tutorial.info/html5-contact.php">Input type: Email, Url, Phone</link>
      <link url="http://diveintohtml5.info/forms.html">Diving in to HTML5 forms</link>
    </rule>
    <rule name="Manual check using emulators">
      <link url="http://www.webdesignerdepot.com/2012/11/6-free-mobile-device-emulators-for-testing-your-site/">6 free mobile emulators</link>
      <link url="http://www.opera.com/developer/tools/mobile/">Opera Mobile Emulator</link>
    </rule>
  </category>

  <category name="Analytics">
    <rule name="Uptime monitoring">
      <link url="http://www.uptimerobot.com/">Uptime robot</link>
      <link url="http://www.gotsitemonitor.com/">GotSiteMonitor.com</link>
    </rule>
    <rule name="Traffic analysis">
      <link url="http://www.google.com/analytics">Google Analytics</link>
      <link url="http://statcounter.com/">StatCounter</link>
      <link url="http://clicky.com/">Clicky</link>
    </rule>
  </category>

  <category name="Performance">
    <rule name="Google Page Speed score of 90+">
      <link url="https://developers.google.com/speed/pagespeed/">Google Page Speed</link>
    </rule>
    <rule name="Yahoo YSlow score of 85+">
      <link url="http://yslow.org/">Yahoo's YSlow</link>
      <link url="http://mark.mymonster.nl/2011/10/18/improve-the-yslow-score-remove-the-etags">Remove ETags in ASP.NET</link>
    </rule>
    <rule name="Optimize HTTP headers">
      <link url="http://redbot.org">redbot.org</link>
    </rule>
    <rule name="Optimize images">
      <link url="http://www.smushit.com/ysmush.it/">SmushIt.com</link>
      <link url="http://punypng.com/">PunyPNG.com</link>
      <link url="http://visualstudiogallery.msdn.microsoft.com/a56eddd3-d79b-48ac-8c8f-2db06ade77c3/">Image Optimizer for Visual Studio</link>
      <link url="http://pnggauntlet.com/">PNGGauntlet application</link>
    </rule>
  </category>

  <category name="Usability">
    <rule name="HTML5 compatibility check">
      <link url="http://ie.microsoft.com/testdrive/HTML5/CompatInspector/">Compat Inspector</link>
      <link url="http://modernizr.com/">Modernizr JS library</link>
    </rule>
    <rule name="Custom 404 page">
      <link url="http://www.alistapart.com/articles/amoreuseful404/">A more useful 404</link>
      <link url="http://www.stokia.com/support/misc/web-config-custom-httperrors.aspx">Custom error pages in ASP.NET</link>
    </rule>
    <rule name="Favicon">
      <link url="http://tools.dynamicdrive.com/favicon/">Online generator</link>
      <link url="http://stackoverflow.com/questions/3728392/whats-the-optimal-html-link-syntax-to-use-for-site-icons-favions">How to properly link a favicon</link>
    </rule>
    <rule name="Use friendly URLs">
      <link url="http://www.seomoz.org/blog/11-best-practices-for-urls">11 best practices for URLs</link>
      <link url="http://www.iis.net/learn/extensions/url-rewrite-module/url-rewrite-module-configuration-reference">URL rewriting in IIS</link>
      <link url="http://httpd.apache.org/docs/current/mod/mod_rewrite.html">URL rewrite in Apache</link>
    </rule>
    <rule name="Add P3P policy" optional="true">
      <link url="http://msdn.microsoft.com/en-us/library/ms537341.aspx">How to deply P3P</link>
      <link url="http://support.microsoft.com/kb/324013">Configure IIS to use P3P</link>
      <link url="http://www.w3.org/P3P/validator.html">P3P validator</link>
    </rule>
    <rule name="Add search feature" optional="true">
      <link url="http://www.google.com/cse/">Google Custom Search</link>
      <link url="http://www.opensearch.org/">Consider 'Open Search'</link>
    </rule>
    <rule name="Environment Integration" optional="true">
      <link url="http://developer.apple.com/library/ios/#documentation/AppleApplications/Reference/SafariWebContent/ConfiguringWebApplications/ConfiguringWebApplications.html">Safari on iOS</link>
      <link url="http://msdn.microsoft.com/en-us/library/ie/hh781490%28v=vs.85%29.aspx">Internet Explorer on Windows</link>
    </rule>
  </category>

  <category name="Code quality">
    <rule name="HTML validation">
      <link url="http://validator.w3.org/">W3C HTML validator</link>
      <link url="http://watson.addy.com/">Dr. Watson</link>
    </rule>
    <rule name="CSS validation">
      <link url="http://jigsaw.w3.org/css-validator/">W3C CSS validator</link>
    </rule>
    <rule name="World ready">
      <link url="http://validator.w3.org/i18n-checker/">W3C i18n checker</link>
    </rule>
    <rule name="Run CSS Lint">
      <link url="http://csslint.net/">Run CSS Lint online</link>
      <link url="http://visualstudiogallery.msdn.microsoft.com/a921b98e-9430-4be2-bf53-1169e12bdb50">CssCop for VS 2010</link>
      <link url="http://vswebessentials.com/">Web Essentials for VS2012</link>
    </rule>
    <rule name="Run JSLint/JSHint">
      <link url="http://jslint.org/">Run JSLint online</link>
      <link url="http://jshint.com/">Run JSHint online</link>
      <link url="http://vswebessentials.com/">Web Essentials for VS2012</link>
    </rule>
    <!--<rule name="RSS/ATOM validation" optional="true">
      <link url="http://validator.w3.org/feed/">W3C feed validator</link>
      <link url="http://feedvalidator.org/">feedvalidator.org</link>
    </rule>-->
  </category>

  <category name="SEO">
    <rule name="SenSEO score of 85+">
      <link url="https://addons.mozilla.org/en-US/firefox/addon/senseo/">SenSEO for Firefox</link>
    </rule>
    <rule name="Google Rich Snippets">
      <link url="http://www.google.com/webmasters/tools/richsnippets">Online tester</link>
      <link url="http://schema.org/docs/gs.html">Getting started</link>
    </rule>
    <rule name="robots.txt">
      <link url="http://support.google.com/webmasters/bin/answer.py?hl=en&amp;answer=156449&amp;from=35237&amp;rd=1">robots.txt tutorial</link>
      <link url="http://www.robotsgenerator.com/">Create robots.txt online</link>
    </rule>
    <rule name="XML sitemap">
      <link url="http://www.xml-sitemaps.com/">Create sitemap online</link>
    </rule>
  </category>

  <category name="Semantics">
    <rule name="Add meaning with Microdata">
      <link url="http://schema.org/">Schema.org reference</link>
      <link url="http://schema-creator.org/">Schema-Creator.org</link>
    </rule>
    <rule name="Check the semantics">
      <link url="http://www.w3.org/2003/12/semantic-extractor.html">W3C semantic extractor</link>
    </rule>
  </category>

  <category name="Accessibility">
    <rule name="Accessibility validation">
      <link url="http://accessibility.oit.ncsu.edu/accessibleu/problems.html">Common problems and solutions</link>
      <link url="http://achecker.ca/checker/index.php">IDI Web Accessibility Checker</link>
      <link url="http://www.nvda-project.org/">Test using a screen reader</link>
    </rule>
    <rule name="Color contrast">
      <link url="http://www.checkmycolours.com/">Check color contrast online</link>
    </rule>
    <rule name="WAI-ARIA Landmarks">
      <link url="http://accessibility.oit.ncsu.edu/blog/2011/06/30/using-aria-landmarks-a-demonstration/">Using WAI-ARIA Landmarks</link>
      <link url="http://www.alistapart.com/articles/the-accessibility-of-wai-aria/">Guide to WAI-ARIA</link>
      <link url="http://www.punkchip.com/2010/11/aria-basic-findings/">Practical examples</link>
    </rule>
  </category>

  <category name="Security">
    <rule name="Follow best practices">
      <link url="https://asafaweb.com/">ASafaaWeb security analyzer</link>
      <link url="https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project">OWASP Top 10 project</link>
      <link url="https://www.owasp.org/index.php/Cheat_Sheets">OWASP Cheat Sheets</link>
    </rule>
    <rule name="Cross-site scripting">
      <link url="https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet">XSS cheat sheet</link>
      <link url="https://www.owasp.org/index.php/DOM_based_XSS_Prevention_Cheat_Sheet">DOM based XSS cheat sheet</link>
      <link url="http://www.acunetix.com/cross-site-scripting/scanner/">Free XSS scanner</link>
    </rule>
    <rule name="Cross-site request forgery">
      <link url="http://www.codinghorror.com/blog/2008/09/cross-site-request-forgeries-and-you.html">Explanation and walkthrough</link>
      <link url="https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet">CSRF cheat sheet</link>
    </rule>
    <rule name="Secure connection (SSL)" optional="true">
      <link url="http://support.microsoft.com/kb/299875">Setup SSL on IIS 7</link>
      <link url="http://www.digicert.com/ssl-certificate-installation-apache.htm">Setup SSL on Apache</link>
      <link url="http://certlogik.com/ssl-checker/">Online SSL checker</link>
      <link url="http://www.html5rocks.com/en/tutorials/security/content-security-policy/">Content Security Policy</link>
    </rule>
    <rule name="HTTP Strict Transport Security" optional="true">
      <link url="https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security">MDN Overview</link>
      <link url="https://www.owasp.org/index.php/HTTP_Strict_Transport_Security">OWASP Overview</link>
    </rule>
  </category>

  <category name="...and finally">
    <rule name="Add humans.txt" optional="true">
      <link url="http://humanstxt.org/">We are humans, not machines!</link>
    </rule>
  </category>

</checklist>