arrowheadautobody.com — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

Server responded in 5.2s. Aim for under 200ms Time to First Byte (TTFB). Check your server configuration, database queries, and hosting performance.

4 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Found 3 of 14 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

3 of 14 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Heading hierarchy jumps from H2 to H4. Don't skip heading levels — this confuses screen readers and assistive technology.

Some text appears to use light colors that may not have sufficient contrast against the background. WCAG requires a minimum 4.5:1 contrast ratio.

13 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Found 50 elements with large inline styles. Move these to external CSS for better caching and maintainability.

Found 11 HTML comments. Remove unnecessary comments in production to reduce file size.