Cure Media

What Dr Urls found on curemedia.com

From the audit of their public home page on 23/10/2026, worst first. Each links to what it means and how it is fixed.

• high
  Cacheable response sets a cookie, so no CDN will cache it

  The two headers contradict each other, and the contradiction is silent: the page looks cached, the CDN is configured, and every request still pays full origin latency.

• high
  Missing landmark elements

  WCAG 1.3.1 requires that page structure is programmatically determinable.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• medium
  Stylesheets loaded in body

  Stylesheets in the body block rendering of subsequent content and can cause visible layout shifts as styles are applied incrementally.

• low
  Apple touch icon missing

  The apple-touch-icon provides a branded icon when users bookmark your site on iOS devices.

• low
  Excessive inline JavaScript

  Inline JavaScript cannot be cached by the browser and must be parsed and executed every time the page loads.

• low
  Images not using modern format

  WebP images are 25-35% smaller than equivalent JPEG images, and AVIF offers even greater savings.

• low
  Link is named for screen readers but has no anchor text

  Nothing is broken for users.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  Multiple H1 headings on page

  Multiple H1 tags can dilute the topical focus of the page.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

3 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.