frugalflyer.ca — Website Report

Enable HTTP Strict Transport Security to force HTTPS connections.

# Nginx:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Apache (.htaccess):
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Next.js (next.config.js headers):
{ key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' }

16 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Set X-Content-Type-Options: nosniff to prevent MIME-type sniffing.

# Nginx:
add_header X-Content-Type-Options "nosniff" always;

# Next.js (next.config.js headers):
{ key: 'X-Content-Type-Options', value: 'nosniff' }

Set X-Frame-Options to prevent clickjacking attacks.

# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }

Add a Referrer-Policy header to control information leakage.

# Nginx:
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Next.js (next.config.js headers):
{ key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Found 2 of 4 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

2 of 4 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Form inputs should have associated labels or aria-label attributes so screen readers can identify them.

Some text appears to use light colors that may not have sufficient contrast against the background. WCAG requires a minimum 4.5:1 contrast ratio.

Loading 24 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

Found 14 HTML comments. Remove unnecessary comments in production to reduce file size.