aioseo.com — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

13 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Your description is 378 characters. Keep it under 160 for best display.

Heading hierarchy jumps from H2 to H4. Don't skip heading levels — this confuses screen readers and assistive technology.

Some text appears to use light colors that may not have sufficient contrast against the background. WCAG requires a minimum 4.5:1 contrast ratio.

Your HTML is 282KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

13 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Found 86 HTML comments. Remove unnecessary comments in production to reduce file size.