Daware

What Dr Urls found on daware.io

From the audit of their public home page on 25/10/2026, worst first. Each links to what it means and how it is fixed.

• high
  Missing landmark elements

  WCAG 1.3.1 requires that page structure is programmatically determinable.

• medium
  Form inputs missing autocomplete attribute

  WCAG 1.3.5 requires input purpose to be programmatically determined for inputs collecting user information.

• medium
  Image file too large (>500 KB)

  Images typically account for 50-75% of a page's total weight.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• low
  Below-the-fold images not lazy loaded

  Loading all images immediately increases initial page weight and competes with critical resources for bandwidth.

• low
  Excessive inline CSS

  Inline CSS cannot be cached separately by the browser, so it is re-downloaded with every page load.

• low
  Excessive inline JavaScript

  Inline JavaScript cannot be cached by the browser and must be parsed and executed every time the page loads.

• low
  Image has empty alt attribute

  If a content-relevant image has an empty alt attribute, search engines cannot understand what the image depicts, and it will not appear in image search results.

• low
  Images not using modern format

  WebP images are 25-35% smaller than equivalent JPEG images, and AVIF offers even greater savings.

• low
  Key resources not preloaded

  Without preloading, the browser discovers critical resources late in the parsing process, delaying their download.

• low
  Missing preconnect hints for critical origins

  Each new origin connection requires DNS resolution, TCP handshake, and TLS negotiation, adding 100-300ms of latency.

• low
  X-Content-Type-Options header missing

  Without this header, browsers may interpret files as a different content type than intended, which can lead to XSS attacks when a malicious file is interpreted as executable scrip…

7 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.