Storm - Tempête créative

What Dr Urls found on strmstudio.com

From the audit of their public home page on 02/11/2026, worst first. Each links to what it means and how it is fixed.

• high
  Missing landmark elements

  WCAG 1.3.1 requires that page structure is programmatically determinable.

• medium
  Cache-Control header missing

  Proper caching prevents browsers from re-downloading unchanged resources, dramatically improving repeat visit performance.

• medium
  Duplicate ID attributes found

  Duplicate IDs cause label elements, aria-labelledby, aria-describedby, and fragment link targets to associate with the wrong element.

• medium
  Excessive third-party resource loading

  Third-party resources are outside your control and often add significant payload, blocking time, and unpredictable latency.

• medium
  Form inputs missing associated labels

  Unlabelled form fields are unusable for screen reader users, who represent a significant portion of potential customers.

• medium
  Images missing width and height attributes

  Missing image dimensions are the leading cause of Cumulative Layout Shift (CLS), a Core Web Vital and ranking factor.

• medium
  Link has empty anchor text

  Anchor text is one of the strongest signals search engines use to understand the content of the linked page.

• medium
  Missing lang attribute on <html> element

  Without the lang attribute, screen readers may use the wrong pronunciation rules, making the content incomprehensible for visually impaired users.

• medium
  Missing skip-to-content navigation link

  WCAG 2.4.1 requires a way to bypass blocks repeated on every page.

• medium
  Render-blocking CSS or JavaScript

  Render-blocking resources directly impact First Contentful Paint (FCP) and Largest Contentful Paint (LCP), both Core Web Vitals metrics.

• medium
  Scripts without async or defer

  Synchronous scripts halt HTML parsing while the browser downloads and executes them.

• medium
  Too many external JavaScript files

  Each external script requires a DNS lookup, TCP connection, and HTTP request.

And 7 more. 3 security findings are not listed on this public page; the site's owner sees them in a full audit after claiming it.