webhint report for https://spots.augusta.edu/caubert/

This site uses cookies for analytics. By continuing to browse this site, you agree to this use.

scanning 100%

scan time: 02:58

hints

25

url: https://spots.augusta.edu/caubert/

Your scan result link: https://webhint.io/scanner/ae55e194-13a2-45a8-b36b-6e957fda0951

Date: 2020-10-08T20:11:26.384Z

webhint version: 6.1.0

Configuration JSON

Hints

Accessibility

No issues

Compatibility

compat-api/html: 1 hints

Why is this important How to fix it

hint #1: 'meta[name=theme-color]' is not supported by Edge, Firefox, Firefox Android, Opera, Safari, iOS Safari.

https://spots.augusta.edu/caubert/

<meta name="theme-color" content="#ffffff">

Further Reading

Learn more about this HTML feature on MDN

PWA

No issues

Performance

http-cache: 6 hints

Why is this important How to fix it

hint #1: The 'cache-control' header should not contain 'max-age' or 's-maxage' when 'no-cache' or 'no-store' is specified.

https://spots.augusta.edu/caubert/

Cache-Control: immutable,max-age=2592000,no-cache

hint #2: The 'cache-control' header should not contain 'max-age' or 's-maxage' when 'no-cache' or 'no-store' is specified.

https://spots.augusta … BGaramond12-Regular.woff2

Cache-Control: immutable,max-age=2592000,no-cache

hint #3: The 'cache-control' header should not contain 'max-age' or 's-maxage' when 'no-cache' or 'no-store' is specified.

https://spots.augusta … img/official_pic.jpg

Cache-Control: immutable,max-age=2592000,no-cache

hint #4: The 'cache-control' header should not contain 'max-age' or 's-maxage' when 'no-cache' or 'no-store' is specified.

https://spots.augusta … ubert/web/style/style.css

Cache-Control: immutable,max-age=2592000,no-cache

hint #5: The 'cache-control' header should not contain 'max-age' or 's-maxage' when 'no-cache' or 'no-store' is specified.

https://spots.augusta … caubert/favicon-32x32.png

Cache-Control: immutable,max-age=2592000,no-cache

hint #6: The 'cache-control' header should not contain 'max-age' or 's-maxage' when 'no-cache' or 'no-store' is specified.

https://spots.augusta … caubert/site.webmanifest

Cache-Control: immutable,max-age=2592000,no-cache

http-compression: 4 hints

Why is this important How to fix it

hint #1: Response should be compressed with Zopfli when gzip compression is requested.

https://spots.augusta … ubert/web/style/style.css

<link rel="stylesheet" href="./web/style/style.css" type="text/css" media="all">

hint #2: Response should be compressed with Brotli when Brotli compression is requested over HTTPS.

https://spots.augusta … ubert/web/style/style.css

<link rel="stylesheet" href="./web/style/style.css" type="text/css" media="all">

hint #3: Response should be compressed with gzip when gzip compression is requested.

https://spots.augusta … caubert/site.webmanifest

<link rel="manifest" href="https://spots.augusta.edu/caubert/site.webmanifest">

hint #4: Response should be compressed with Brotli when Brotli compression is requested over HTTPS.

https://spots.augusta … caubert/site.webmanifest

<link rel="manifest" href="https://spots.augusta.edu/caubert/site.webmanifest">

no-html-only-headers: 5 hints

Why is this important How to fix it

hint #1: Response should not include unneeded headers: content-security-policy, feature-policy, x-xss-protection

https://spots.augusta … BGaramond12-Regular.woff2

<link rel="preload" href="web/fonts/EBGaramond12-Regular.woff2" as="font" type="font/woff2" crossorigin="anonymous">

hint #2: Response should not include unneeded headers: content-security-policy, feature-policy, x-xss-protection

https://spots.augusta … img/official_pic.jpg

<img src="web/img/official_pic.jpg" alt="Avatar" id="official_pic" width="150" height="169">

hint #3: Response should not include unneeded headers: content-security-policy, feature-policy, x-xss-protection

https://spots.augusta … ubert/web/style/style.css

<link rel="stylesheet" href="./web/style/style.css" type="text/css" media="all">

hint #4: Response should not include unneeded headers: content-security-policy, feature-policy, x-xss-protection

https://spots.augusta … caubert/favicon-32x32.png

hint #5: Response should not include unneeded headers: content-security-policy, feature-policy, x-xss-protection

https://spots.augusta … caubert/site.webmanifest

<link rel="manifest" href="https://spots.augusta.edu/caubert/site.webmanifest">

performance-budget: 1 hints

Why is this important How to fix it

hint #1: To load all the resources on a 4G network, it will take about 5.8s in optimal conditions (that is 0.8s more than the 5s target).

https://spots.augusta.edu/caubert/

image-optimization-cloudinary: 1 hints

Why is this important How to fix it

hint #1: Total size savings optimizing the images on 'https://spots.augusta.edu/caubert/' could be of around 10kB.

Pitfalls

No issues

Security

no-disallowed-headers: 6 hints

Why is this important How to fix it

hint #1: The 'X-Frame-Options' header should not be used. A similar effect, with more consistent support and stronger checks, can be achieved with the 'Content-Security-Policy' header and 'frame-ancestors' directive.

https://spots.augusta.edu/caubert/

x-frame-options: sameorigin

hint #2: The 'X-Frame-Options' header should not be used. A similar effect, with more consistent support and stronger checks, can be achieved with the 'Content-Security-Policy' header and 'frame-ancestors' directive.

https://spots.augusta … BGaramond12-Regular.woff2

x-frame-options: sameorigin

hint #3: The 'X-Frame-Options' header should not be used. A similar effect, with more consistent support and stronger checks, can be achieved with the 'Content-Security-Policy' header and 'frame-ancestors' directive.

https://spots.augusta … img/official_pic.jpg

x-frame-options: sameorigin

hint #4: The 'X-Frame-Options' header should not be used. A similar effect, with more consistent support and stronger checks, can be achieved with the 'Content-Security-Policy' header and 'frame-ancestors' directive.

https://spots.augusta … ubert/web/style/style.css

x-frame-options: sameorigin

hint #5: The 'X-Frame-Options' header should not be used. A similar effect, with more consistent support and stronger checks, can be achieved with the 'Content-Security-Policy' header and 'frame-ancestors' directive.

https://spots.augusta … caubert/favicon-32x32.png

x-frame-options: sameorigin

hint #6: The 'X-Frame-Options' header should not be used. A similar effect, with more consistent support and stronger checks, can be achieved with the 'Content-Security-Policy' header and 'frame-ancestors' directive.

https://spots.augusta … caubert/site.webmanifest

x-frame-options: sameorigin