RE: Check your website for flaws 07-06-2018, 06:36 AM
#11
(07-06-2018, 06:22 AM)mothered Wrote:(07-06-2018, 05:58 AM)ProfessorChill Wrote:(07-06-2018, 05:41 AM)mothered Wrote: The site's accuracy with It's analysis, remains questionable.
I've just tested Microsoft and It appears (according to the scan), they have some work to do.
Spoiler:
Alright, I ran it as well.
This is for IE7 support (or IE6, can't remember) so it's backwards compatability, however microsoft does not use this because they create based on their newest browser.
This error pops up ALOT
'content-type' header should have media type 'text/javascript' (not 'application/javascript')
This is suggestive, however it's not wrong. Zopfli is better than Gzip. The issue is that it's slower (22 counts of this)
Should be served compressed with Zopfli when gzip compression is requested.
It's not needed, pretty much every website does it though.
Only specific files need that.
'x-xss-protection' header is not needed (this is on a <img> tag)
They probably use a different type of caching, common error even with people who have made websites FOREVER.
That's more of a general guide.
Static resources should have a long cache value (31536000) and use the immutable directive: public, max-age=17516844
It's Microsoft, they probably don't support Apple that well :/
No 'apple-touch-icon' was specified
The list goes on and on, it's general guidelines you should follow, it's like saying you should DOCstring everything, well.... Yes... If you're explaining your code to a retard (that thinks formatting improves performance).
Judging by all the above, the site should certainly be used as a general guidance, rather than a conclusive platform for analysis.
I've always been a firm believer In "Some Information, no matter how Irrelevant It may seem at the time, Is better than none". My security site Is In an offline state at the moment (90% complete after 4+ months of work). I may put It online for a few minutes, test, and see the results.
With the NPM version you can test offline websites. But yeah, I should have said it was a general guidance tool, not a linter, sorry about that :/