Nellie's working overtime

hint #1: <html> element must have a lang attribute: The <html> element does not have a lang attribute

<html>

Compatibility

content-type: 3 hints

hint #1: 'content-type' header media type value should be 'text/javascript', not 'application/x-javascript'.

Content-Type: application/x-javascript

hint #2: 'content-type' header charset value should be 'utf-8'.

Content-Type: application/x-javascript

hint #3: 'content-type' header media type value should be 'image/x-icon', not 'text/html'.

Content-Type: text/html; charset=utf-8

meta-viewport: 1 hints

hint #1: A 'viewport' meta element was not specified.

PWA

No issues

Performance

http-cache: 4 hints

hint #1: Resource should use cache busting but URL does not match configured patterns.

hint #2: Static resources should use a 'cache-control' header with 'max-age=31536000' or more.

Cache-Control: public, max-age=604800

hint #3: Static resources should use a 'cache-control' header with the 'immutable' directive.

Cache-Control: public, max-age=604800

hint #4: A 'cache-control' header is missing or empty.

http-compression: 5 hints

hint #1: Response should be compressed with Zopfli when gzip compression is requested.

hint #2: Response should include 'vary' header containing 'accept-encoding' value.

Vary: 
Cache-Control: public, max-age=604800

hint #3: Response should include 'vary' header containing 'accept-encoding' value.

Vary: 
Cache-Control: public, max-age=604800

hint #4: Response should be compressed with gzip when gzip compression is requested.

hint #5: Response should be compressed with Brotli when Brotli compression is requested over HTTPS.

Pitfalls

No issues

Security

no-disallowed-headers: 2 hints

hint #1: The 'Expires' header should not be used, 'Cache-Control' should be preferred.

expires: wed, 27 jan 2021 00:24:27 gmt

hint #2: The 'Expires' header should not be used, 'Cache-Control' should be preferred.

expires: sun, 31 jan 2021 10:52:21 gmt

strict-transport-security: 2 hints

hint #1: The 'strict-transport-security' header was not specified.

hint #2: The 'strict-transport-security' header was not specified.

x-content-type-options: 2 hints

hint #1: Response should include 'x-content-type-options' header.

hint #2: Response should include 'x-content-type-options' header.