Аудит сайта papadoner.by

Missing security headers (score 21%)

Not set: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, X-XSS-Protection and 5 more.

Invalid canonical tag

Canonical points to the wrong URL — may cause duplicate pages in the index.

WWW and non-WWW both accessible — duplicate content

Both www.example.com and example.com return 200 without redirecting. Search engines may index both as separate pages.

1 image without alt text

Alt text is required for screen readers and SEO — search engines cannot "see" images without it.

Low accessibility score (64/100)

The site is difficult for people with disabilities and poorly read by screen readers.

171 HTML validation errors

Invalid HTML can break rendering across browsers and hinder search engine parsing.

Title length: 91 chars (target 50–70)

Title too long — truncated in Google snippets.

Open Graph tags incomplete

Links shared on social media look bare — no image or description.

5 images heavier than 500 KB

Heavy images slow page load, especially on mobile.

1 cookie without Secure/HttpOnly flags

Cookies without Secure are sent over HTTP; without HttpOnly they are accessible from JS — XSS risk.

Trailing slash inconsistency — /page and /page/ both accessible

Both URL variants return 200 without redirecting to each other — potential duplicate pages.

Using GZIP but no Brotli

Brotli compresses 15–25% better than GZIP — supported by all modern browsers.