mti.moscow — Website Report

Add a Content-Security-Policy header to prevent XSS and injection attacks.

# Nginx:
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';" always;

# Apache (.htaccess):
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';"

# Next.js (next.config.js headers):
{ key: 'Content-Security-Policy', value: "default-src 'self'; script-src 'self' 'unsafe-inline'" }

20 scripts without async or defer attributes. These block page rendering. Add defer or async to non-critical scripts.

Set X-Frame-Options to prevent clickjacking attacks.

# Nginx:
add_header X-Frame-Options "SAMEORIGIN" always;

# Next.js (next.config.js headers):
{ key: 'X-Frame-Options', value: 'SAMEORIGIN' }

Add a Permissions-Policy header to control browser feature access.

# Nginx:
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

# Next.js (next.config.js headers):
{ key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' }

Your title is 82 characters. Keep it under 60 for best display in search results.

Your description is 393 characters. Keep it under 160 for best display.

Found 3 of 146 images without alt attributes. Alt text is critical for accessibility (screen readers) and SEO (image search).

1 of 146 images have no alt attribute. Screen readers cannot describe these images to visually impaired users.

Form inputs should have associated labels or aria-label attributes so screen readers can identify them.

Heading hierarchy jumps from H1 to H3. Don't skip heading levels — this confuses screen readers and assistive technology.

Server responded in 1.3s. Aim for under 200ms TTFB. Consider caching, CDN, or server-side optimizations.

Your HTML is 287KB. Large HTML documents take longer to parse. Consider lazy loading content or splitting into multiple pages.

Loading 13 CSS files. Each blocks rendering. Consider combining stylesheets or inlining critical CSS.

146 images don't use loading="lazy". Add lazy loading to below-the-fold images to improve initial page load.

Add twitter:card meta tags for optimized appearance when your pages are shared on Twitter/X.

<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:title" content="Your Page Title">
<meta name="twitter:description" content="A compelling description">
<meta name="twitter:image" content="https://yoursite.com/twitter-image.jpg">

Add a 'Skip to main content' link at the top of the page so keyboard users can bypass repetitive navigation.

<!-- Add as the first element inside <body> -->
<a href="#main-content" class="sr-only focus:not-sr-only focus:absolute focus:top-2 focus:left-2 focus:z-50 focus:px-4 focus:py-2 focus:bg-blue-600 focus:text-white focus:rounded">
  Skip to main content
</a>

<!-- Add id to your main content area -->
<main id="main-content">
  ...
</main>

Add <link rel='preconnect'> for critical third-party domains to reduce connection setup time.

<!-- Add to <head> for your critical third-party domains -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="dns-prefetch" href="https://cdn.example.com">

Found 26 HTML comments. Remove unnecessary comments in production to reduce file size.