Webperf result optimizely.com

Security section:
- Sitemap, Url in <loc> has to start with https://ok
- security.txt is missingok
- security.txt has incorrect contentok
- security.txt is missing the required contact infook
- security.txt requires expiration information (added in draft v10) is missingok

Standards section:
- Sitemap, No duplicate Urls in <loc> allowedwarning
Tested:
- https://www.optimizely.com/

- Feed is missing in the HTML's metadatawarning
Tested:
- https://www.optimizely.com/

- robots.txt is missing, not allowed to download or has not the expected contentok
- Sitemap is not specified in robots.txtok
- Sitemap, no valid sitemap foundok
- Sitemap, Url in <loc> must use same domain as robots.txtok
- Sitemap, lists other stuff then webpagesok
- Sitemap, is exceeding 50 000 itemsok
- Sitemap, has no itemsok

Accessibility section:
- This form field should be labelled in some way. Use the label element (either with a "for" attribute or wrapped around the form field), or "title", "aria-label" or "aria-labelledby" attributes as appropriate.error
Tested:
- https://www.optimizely.com/

- This textinput element does not have a name available to an accessibility API. Valid names are: label element, title undefined, aria-label undefined, aria-labelledby undefined.error
Tested:
- https://www.optimizely.com/

- This textarea element does not have a name available to an accessibility API. Valid names are: label element, title undefined, aria-label undefined, aria-labelledby undefined.error
Tested:
- https://www.optimizely.com/

- Iframe element requires a non-empty title attribute that identifies the frame.error
Tested:
- https://www.optimizely.com/

- This element has insufficient contrast at this conformance level. Expected a contrast ratio of at least 3:1, but text in this element has a contrast ratio of 2.62:1. Recommendation: change text colour to #fbfcff.error
Tested:
- https://www.optimizely.com/

- About average privacy settings, but should get better.

Security section:
- HTTPS by default is good! 5.00
- HTTP Strict Transport Security HSTS is good, but with 1 warning(s). 4.75
- Content Security Policy is pretty bad. 1.00
- Reporting CSP Certificate Transparency Network Error Logging is good! 5.00
- Referrer Policy is good! 5.00
- Subresource Integrity SRI is pretty bad. 1.00
- HTTP headers is good! 5.00
- Cookies is ok, with 70 error(s) and 0 warning(s). 1.00

- The website is generating a lot of carbon dioxide, for every pageview :(
- Carbon dioxide per pageview: 6.63 gram(s)
- More green than 10 % of the websites tested by webperf.se (Reference updated: 2025-01-09).
- Network transfer size: 10.49 MB 0.50

- CMS used: episerver
- Web server used: envoy, kestrel, microsoft-httpapi, nginx
- Technology used: asp.net, c, csharp, es6, js, typescript
- License(s) used: apache-2.0, mit
- Metadata used: dns-prefetch, icon, preload, viewport
- Javascript libraries used: applicationinsights-js, babel, clarity, clarity-js, core-js, domready, jquery, jquery-ui, react, transformation-matrix, util
- Languages found: de, en, no, sv, x-default
- Image formats used: gif, jpg, png, svg, webp

Accessibility section:
##### You don't seem to be using accessibility overlay software 5.00

Security section:
##### Software related to CVE:s 1.0

###### Introduction:
Software version used is affected by vulnerability described below.
In most cases you can fix a CVE related issue by updating software to latest version.
In some rare cases there is no update and you need to consider not using the software affected.

###### Common Vulnerabilities and Exposures
- CVE-2025-53859
- CVE-2025-23419
- CVE-2024-7347
- CVE-2022-41741
- CVE-2022-41742

###### Detected software(s):
- nginx 1.20.1

###### Affected resource(s):
- https://947-rke-048.mktoresp.com/webevents/visitWebPage?_mchNc=1763375199866&_mchCn=&_mchId=947-RKE-048&_mchTk=_mch-optimizely.com-95c7b8922145117919686dc615a39e60&_mchHo=www.optimizely.com&_mchPo=&_mchRu=%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=&_mchHa=&_mchRe=&_mchQp=
##### Software is behind >=25 versions 2.75

###### Introduction:
Software used is behind 25 or more version compared to latests.
This is a good indicator that you need to update to latest version.
It also indicate that you don't have a good package routine for your software.
You can fix this by updating software to latest version.

###### Detected software(s):
- applicationinsights-js 2.8.18
- nginx 1.20.1

###### Affected resource(s):
- https://js.monitor.azure.com/scripts/b/ai.2.gbl.min.js
- https://947-rke-048.mktoresp.com/webevents/visitWebPage?_mchNc=1763375199866&_mchCn=&_mchId=947-RKE-048&_mchTk=_mch-optimizely.com-95c7b8922145117919686dc615a39e60&_mchHo=www.optimizely.com&_mchPo=&_mchRu=%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=&_mchHa=&_mchRe=&_mchQp=
##### Software is behind >=10 versions 3.0

###### Introduction:
Software used is behind 10 or more version compared to latests.
This is a semi good indicator that you need to update to latest version.
It also indicate that you don't have a good package routine for your software.
You can fix this by updating software to latest version.

###### Detected software(s):
- core-js 3.32.2

###### Affected resource(s):
- https://connect.facebook.net/en_US/fbevents.js
##### Software is behind >=1 versions 4.9

###### Introduction:
Software used is behind 1 or more version compared to latests.
This is a small indicator that you need to update to latest version.
You can fix this by updating software to latest version.

###### Detected software(s):
- react 18.2.0
- jquery 3.5.1
- jquery-ui 1.13.3

###### Affected resource(s):
- https://www.optimizely.com/assets/entry-client-91f225f7.js
- https://www.optimizely.com/Util/EPiServer.Forms/jquery-3.5.1.min.js
- https://www.optimizely.com/Util/EPiServer.Forms.Samples/jquery-ui/jquery-ui.min.js
##### Opensource software used seem to be maintained 5.00
##### You don't seem to be using 'END OF LIFE' software 5.00

Standards section:
- Require `id` to be a valid identifiererror
More info:
- https://html-validate.org/rules/valid-id.html

Tested:
- https://www.optimizely.com/

- Validate permitted attribute valueserror
More info:
- https://html-validate.org/rules/attribute-allowed-values.html

Tested:
- https://www.optimizely.com/

- Ensure required attributes are seterror
More info:
- https://html-validate.org/rules/element-required-attributes.html

Tested:
- https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeurWggAAAAAIxUmsdOFuqf3K6ngR1VwTNffzNh&co=aHR0cHM6Ly93d3cub3B0aW1pemVseS5jb206NDQz&hl=en&v=TkacYOdEJbdB_JjX802TMer9&size=normal&anchor-ms=20000&execute-ms=15000&cb=hykp663skdwt
- https://www.googletagmanager.com/static/service_worker/5ba0/sw_iframe.html?origin=https%3A%2F%2Fwww.optimizely.com
- https://match.adsrvr.org/track/cei?advertiser_id=p8crqh7&cookie_sync=1&upv=3.0.0&upid=mkros1a&ref=https%3a%2f%2fwww.optimizely.com%2f&redirect=1

- Ensure required elements are presenterror
More info:
- https://html-validate.org/rules/element-required-content.html

Tested:
- https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeurWggAAAAAIxUmsdOFuqf3K6ngR1VwTNffzNh&co=aHR0cHM6Ly93d3cub3B0aW1pemVseS5jb206NDQz&hl=en&v=TkacYOdEJbdB_JjX802TMer9&size=normal&anchor-ms=20000&execute-ms=15000&cb=hykp663skdwt
- https://www.googletagmanager.com/static/service_worker/5ba0/sw_iframe.html?origin=https%3A%2F%2Fwww.optimizely.com
- https://match.adsrvr.org/track/cei?advertiser_id=p8crqh7&cookie_sync=1&upv=3.0.0&upid=mkros1a&ref=https%3a%2f%2fwww.optimizely.com%2f&redirect=1

- Validate permitted contentwarning
More info:
- https://html-validate.org/rules/element-permitted-content.html

Tested:
- https://www.optimizely.com/

- Require attributes to be separated by whitespaceok
More info:
- https://html-validate.org/rules/attr-spacing.html

- Require attribute to be used in correct contextok
More info:
- https://html-validate.org/rules/attribute-misuse.html

- Disallow end tags from having attributesok
More info:
- https://html-validate.org/rules/close-attr.html

- Require elements to be closed in correct orderok
More info:
- https://html-validate.org/rules/close-order.html

- Disallow usage of deprecated elementsok
More info:
- https://html-validate.org/rules/deprecated.html

- Disallow usage of deprecated rulesok
More info:
- https://html-validate.org/rules/deprecated-rule.html

- Require usage of `html` doctypeok
More info:
- https://html-validate.org/rules/doctype-html.html

- Disallow invalid element namesok
More info:
- https://html-validate.org/rules/element-name.html

- Validate permitted number of element occurrencesok
More info:
- https://html-validate.org/rules/element-permitted-occurrences.html

- Validate required element orderok
More info:
- https://html-validate.org/rules/element-permitted-order.html

- Validate permitted element parentok
More info:
- https://html-validate.org/rules/element-permitted-parent.html

- Require `<map name>` to be uniqueok
More info:
- https://html-validate.org/rules/map-dup-name.html

- Require name and id to match on `<map>` elementsok
More info:
- https://html-validate.org/rules/map-id-name.html

- Disallow usage of deprecated attributesok
More info:
- https://html-validate.org/rules/no-deprecated-attr.html

- Disallow duplicated attributesok
More info:
- https://html-validate.org/rules/no-dup-attr.html

- Disallow duplicated IDsok
More info:
- https://html-validate.org/rules/no-dup-id.html

- Disallow multiple `<main>`ok
More info:
- https://html-validate.org/rules/no-multiple-main.html

- Disallow the use of unescaped special charactersok
More info:
- https://html-validate.org/rules/no-raw-characters.html

- Disallow unused disable directivesok
More info:
- https://html-validate.org/rules/no-unused-disable.html

- Require end tag for `<script>`ok
More info:
- https://html-validate.org/rules/script-element.html

- Disallow unrecognized character referencesok
More info:
- https://html-validate.org/rules/unrecognized-char-ref.html

- Require autocomplete attribute to be validok
More info:
- https://html-validate.org/rules/valid-autocomplete.html

- Disallow void element with contentok
More info:
- https://html-validate.org/rules/void-content.html

- Performance only 2.25
- Accessibility only 4.00

- deprecationserror
Tested:
- https://www.optimizely.com/

- third-party-cookieserror
Tested:
- https://www.optimizely.com/

- Issues in the `Issues` panel in Chrome Devtoolserror
Tested:
- https://www.optimizely.com/

- Uses HTTPSok
Tested:
- https://www.optimizely.com/

- geolocation-on-startok
Tested:
- https://www.optimizely.com/

- notification-on-startok
Tested:
- https://www.optimizely.com/

- csp-xssok
Tested:
- https://www.optimizely.com/

- has-hstsok
Tested:
- https://www.optimizely.com/

- clickjacking-mitigationok
Tested:
- https://www.optimizely.com/

- trusted-types-xssok
Tested:
- https://www.optimizely.com/

- paste-preventing-inputsok
Tested:
- https://www.optimizely.com/

- image-aspect-ratiook
Tested:
- https://www.optimizely.com/

- Serves images with low resolutionok
Tested:
- https://www.optimizely.com/

- doctypeok
Tested:
- https://www.optimizely.com/

- charsetok
Tested:
- https://www.optimizely.com/

- js-librariesok
Tested:
- https://www.optimizely.com/

- errors-in-consoleok
Tested:
- https://www.optimizely.com/

- valid-source-mapsok
Tested:
- https://www.optimizely.com/

- is-crawlableok
Tested:
- https://www.optimizely.com/

- Document has a `<title>` elementok
Tested:
- https://www.optimizely.com/

- meta-descriptionok
Tested:
- https://www.optimizely.com/

- http-status-codeok
Tested:
- https://www.optimizely.com/

- link-textok
Tested:
- https://www.optimizely.com/

- crawlable-anchorsok
Tested:
- https://www.optimizely.com/

- robots-txtok
Tested:
- https://www.optimizely.com/

- Image elements have `[alt]` attributesok
Tested:
- https://www.optimizely.com/

- hreflangok
Tested:
- https://www.optimizely.com/

- canonicalok
Tested:
- https://www.optimizely.com/

- Redirects HTTP traffic to HTTPSok
- origin-isolationok
- structured-dataok

Accessibility section:
- Elements should use only permitted ARIA attributeserror
Tested:
- https://www.optimizely.com/

- Background and foreground colors should have a sufficient contrast ratioerror
Tested:
- https://www.optimizely.com/

- `[aria-*]` attributes match their rolesok
Tested:
- https://www.optimizely.com/

- ARIA attributes are used as specified for the element's roleok
Tested:
- https://www.optimizely.com/

- `[aria-hidden="true"]` is not present on the document `<body>`ok
Tested:
- https://www.optimizely.com/

- `[aria-hidden="true"]` elements do not contain focusable descendentsok
Tested:
- https://www.optimizely.com/

- `[aria-*]` attributes have valid valuesok
Tested:
- https://www.optimizely.com/

- `[aria-*]` attributes are valid and not misspelledok
Tested:
- https://www.optimizely.com/

- Buttons have an accessible nameok
Tested:
- https://www.optimizely.com/

- Document has a `<title>` elementok
Tested:
- https://www.optimizely.com/

- Heading elements appear in a sequentially-descending orderok
Tested:
- https://www.optimizely.com/

- `<html>` element has a `[lang]` attributeok
Tested:
- https://www.optimizely.com/

- `<html>` element has a valid value for its `[lang]` attributeok
Tested:
- https://www.optimizely.com/

- Image elements have `[alt]` attributesok
Tested:
- https://www.optimizely.com/

- labelok
Tested:
- https://www.optimizely.com/

- Links are distinguishable without relying on colorok
Tested:
- https://www.optimizely.com/

- Links have a discernible nameok
Tested:
- https://www.optimizely.com/

- Lists contain only `<li>` elements and script supporting elements (`<script>` and `<template>`)ok
Tested:
- https://www.optimizely.com/

- List items (`<li>`) are contained within `<ul>`, `<ol>` or `<menu>` parent elementsok
Tested:
- https://www.optimizely.com/

- `[user-scalable="no"]` is not used in the `<meta name="viewport">` element and the `[maximum-scale]` attribute is not less than 5ok
Tested:
- https://www.optimizely.com/

- tabindexok
Tested:
- https://www.optimizely.com/

- Touch targets have sufficient size and spacingok
Tested:
- https://www.optimizely.com/

- landmark-one-mainok
Tested:
- https://www.optimizely.com/

- label-content-name-mismatchok
Tested:
- https://www.optimizely.com/

- accesskeysok
- aria-command-nameok
- Deprecated ARIA roles were not usedok
- aria-dialog-nameok
- aria-input-field-nameok
- aria-meter-nameok
- aria-progressbar-nameok
- `[role]`s have all required `[aria-*]` attributesok
- Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required childrenok
- `[role]`s are contained by their required parent elementok
- `[role]` values are validok
- aria-textok
- aria-toggle-field-nameok
- aria-tooltip-nameok
- aria-treeitem-nameok
- bypassok
- definition-listok
- dlitemok
- duplicate-id-ariaok
- form-field-multiple-labelsok
- frame-titleok
- html-xml-lang-mismatchok
- input-button-nameok
- input-image-altok
- meta-refreshok
- object-altok
- select-nameok
- skip-linkok
- td-headers-attrok
- th-has-data-cellsok
- valid-langok
- video-captionok
- focusable-controlsok
- interactive-element-affordanceok
- logical-tab-orderok
- visual-order-follows-domok
- focus-trapsok
- managed-focusok
- use-landmarksok
- offscreen-content-hiddenok
- custom-controls-labelsok
- custom-controls-rolesok
- table-duplicate-nameok
- empty-headingok
- Uses ARIA roles only on compatible elementsok
- Image elements do not have `[alt]` attributes that are redundant textok
- identical-links-same-purposeok
- table-fake-captionok
- td-has-headerok

Performance section:
- First Contentful Painterror
Tested:
- https://www.optimizely.com/

- Largest Contentful Painterror
Tested:
- https://www.optimizely.com/

- Total Blocking Timeerror
Tested:
- https://www.optimizely.com/

- Speed Indexerror
Tested:
- https://www.optimizely.com/

- cache-insighterror
Tested:
- https://www.optimizely.com/

- forced-reflow-insighterror
Tested:
- https://www.optimizely.com/

- LCP request discoveryerror
Tested:
- https://www.optimizely.com/

- Network dependency treeerror
Tested:
- https://www.optimizely.com/

- Render-blocking requestserror
Tested:
- https://www.optimizely.com/

- Time to Interactiveerror
Tested:
- https://www.optimizely.com/

- Max Potential First Input Delayerror
Tested:
- https://www.optimizely.com/

- Reduce unused CSSerror
Tested:
- https://www.optimizely.com/

- Reduce unused JavaScripterror
Tested:
- https://www.optimizely.com/

- JavaScript execution timeerror
Tested:
- https://www.optimizely.com/

- Minimizes main-thread workerror
Tested:
- https://www.optimizely.com/

- Improve image deliverywarning
Tested:
- https://www.optimizely.com/

- Legacy JavaScriptwarning
Tested:
- https://www.optimizely.com/

- Minify JavaScriptwarning
Tested:
- https://www.optimizely.com/

- Avoids enormous network payloadswarning
Tested:
- https://www.optimizely.com/

- Image elements should have explicit `width` and `height`warning
Tested:
- https://www.optimizely.com/

- Cumulative Layout Shiftok
Tested:
- https://www.optimizely.com/

- Layout shift culpritsok
Tested:
- https://www.optimizely.com/

- Document request latencyok
Tested:
- https://www.optimizely.com/

- Optimize DOM sizeok
Tested:
- https://www.optimizely.com/

- Duplicated JavaScriptok
Tested:
- https://www.optimizely.com/

- Font displayok
Tested:
- https://www.optimizely.com/

- lcp-breakdown-insightok
Tested:
- https://www.optimizely.com/

- 3rd partiesok
Tested:
- https://www.optimizely.com/

- Optimize viewport for mobileok
Tested:
- https://www.optimizely.com/

- Minify CSSok
Tested:
- https://www.optimizely.com/

- user-timingsok
Tested:
- https://www.optimizely.com/

- Avoids long main-thread tasksok
Tested:
- https://www.optimizely.com/

- non-composited-animationsok
Tested:
- https://www.optimizely.com/

- Network Requestsok
Tested:
- https://www.optimizely.com/

- Network Round Trip Timesok
Tested:
- https://www.optimizely.com/

- Server Backend Latenciesok
Tested:
- https://www.optimizely.com/

- Main thread tasksok
Tested:
- https://www.optimizely.com/

- Diagnosticsok
Tested:
- https://www.optimizely.com/

- Metricsok
Tested:
- https://www.optimizely.com/

- Screenshot Thumbnailsok
Tested:
- https://www.optimizely.com/

- final-screenshotok
Tested:
- https://www.optimizely.com/

- script-treemap-dataok
Tested:
- https://www.optimizely.com/

- resource-summaryok
Tested:
- https://www.optimizely.com/

- Avoid multiple page redirectsok
Tested:
- https://www.optimizely.com/

- Initial server response time was shortok
Tested:
- https://www.optimizely.com/

- inp-breakdown-insightok
- Avoid large layout shiftsok