Ampersand Labs by Davide Morotti

What Dr Urls found on ampersand.ch

From the audit of their public home page on 08/11/2026, worst first. Each links to what it means and how it is fixed.

• high
  Time to First Byte (TTFB) is slow

  TTFB directly impacts all subsequent loading metrics.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• low
  ETag header missing on resources

  Without ETags, browsers cannot efficiently validate whether cached resources have changed.

• low
  Images missing responsive srcset

  Without srcset, a 1200px wide image is downloaded on a 375px wide mobile screen, wasting bandwidth and slowing load times.

• low
  Link is named for screen readers but has no anchor text

  Nothing is broken for users.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

5 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.