Bonzer AB

What Dr Urls found on bonzer.se

From the audit of their public home page on 25/10/2026, worst first. Each links to what it means and how it is fixed.

• high
  Time to First Byte (TTFB) is slow

  TTFB directly impacts all subsequent loading metrics.

• medium
  Render-blocking CSS or JavaScript

  Render-blocking resources directly impact First Contentful Paint (FCP) and Largest Contentful Paint (LCP), both Core Web Vitals metrics.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• low
  CSS files are not minified

  Unminified CSS files are larger than necessary, increasing download time and delaying rendering.

• low
  ETag header missing on resources

  Without ETags, browsers cannot efficiently validate whether cached resources have changed.

• low
  Excessive inline CSS

  Inline CSS cannot be cached separately by the browser, so it is re-downloaded with every page load.

• low
  Images not using modern format

  WebP images are 25-35% smaller than equivalent JPEG images, and AVIF offers even greater savings.

• low
  Link is named for screen readers but has no anchor text

  Nothing is broken for users.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

7 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.