# birthdaywebsite.app Website Report

- Final URL: https://birthdaywebsite.app/
- Scanned at: 2026-10-17T17:51:20.208Z
- Themerella Score: 80/100
- Technologies detected: 4
- Total issues: 9

## Top Fixes
1. [P1] Missing HSTS header (Security, high, security.missing_hsts_header)
   - Add Strict-Transport-Security after confirming the full site works over HTTPS.
   - Fix guide: https://themerella.com/fix/missing-hsts-header/
2. [P1] Missing Content-Security-Policy header (Security, high, security.missing_csp_header)
   - Add a CSP header at the CDN or server layer and test third-party scripts.
   - Fix guide: https://themerella.com/fix/missing-csp-header/
3. [P1] Missing X-Frame-Options header (Security, medium, security.missing_x_frame_options_header)
   - Add X-Frame-Options: SAMEORIGIN or use frame-ancestors in CSP.
   - Fix guide: https://themerella.com/fix/missing-x-frame-options/
4. [P2] Missing X-Content-Type-Options header (Security, medium, security.missing_x_content_type_options_header)
   - Add X-Content-Type-Options: nosniff.
5. [P2] Form labels may be missing (Accessibility, medium, accessibility.form_labels_missing)
   - Associate every input with a visible label or accessible aria-label.
6. [P2] Buttons may lack accessible names (Accessibility, medium, accessibility.buttons_missing_accessible_names)
   - Add visible button text or aria-label for icon-only buttons.
7. [P2] Slow initial HTML response (Performance, medium, performance.slow_initial_html_response)
   - Check server response time, CDN caching, redirects, and backend bottlenecks.
   - Fix guide: https://themerella.com/fix/slow-initial-html-response/
8. [P3] Missing Referrer-Policy header (Security, low, security.missing_referrer_policy_header)
   - Add Referrer-Policy: strict-origin-when-cross-origin.
   - Fix guide: https://themerella.com/fix/missing-referrer-policy/
9. [P3] Missing Permissions-Policy header (Security, low, security.missing_permissions_policy_header)
   - Restrict browser features that the site does not use.

## Technologies
- Google Analytics 4 (Analytics, confidence: high)
  - Evidence [html]: g-white
- Tailwind CSS (CSS / UI, confidence: low)
  - Evidence [html]: class="bg-fd-secondary/50 p-3 empty:hidden
- Next.js (Frontend Framework, confidence: high)
  - Evidence [html]: /_next/static
  - Evidence [resources]: /_next/static
  - Evidence [headers]: next-router
- Cloudflare (Hosting / CDN, confidence: high)
  - Evidence [headers]: cf-ray
  - Evidence [resources]: cloudflareinsights.com

## WordPress
- Detected: no
- Theme: not exposed
- Plugins: none detected
- Legacy signals: none detected

## All Issues
- Missing HSTS header (Security, high, security.missing_hsts_header)
  - Detail: HSTS was not found in the response headers.
  - Fix: Add Strict-Transport-Security after confirming the full site works over HTTPS.
  - Fix guide: https://themerella.com/fix/missing-hsts-header/
- Missing Content-Security-Policy header (Security, high, security.missing_csp_header)
  - Detail: Content-Security-Policy was not found in the response headers.
  - Fix: Add a CSP header at the CDN or server layer and test third-party scripts.
  - Fix guide: https://themerella.com/fix/missing-csp-header/
- Missing X-Frame-Options header (Security, medium, security.missing_x_frame_options_header)
  - Detail: X-Frame-Options was not found in the response headers.
  - Fix: Add X-Frame-Options: SAMEORIGIN or use frame-ancestors in CSP.
  - Fix guide: https://themerella.com/fix/missing-x-frame-options/
- Missing X-Content-Type-Options header (Security, medium, security.missing_x_content_type_options_header)
  - Detail: X-Content-Type-Options was not found in the response headers.
  - Fix: Add X-Content-Type-Options: nosniff.
- Missing Referrer-Policy header (Security, low, security.missing_referrer_policy_header)
  - Detail: Referrer-Policy was not found in the response headers.
  - Fix: Add Referrer-Policy: strict-origin-when-cross-origin.
  - Fix guide: https://themerella.com/fix/missing-referrer-policy/
- Missing Permissions-Policy header (Security, low, security.missing_permissions_policy_header)
  - Detail: Permissions-Policy was not found in the response headers.
  - Fix: Restrict browser features that the site does not use.
- Form labels may be missing (Accessibility, medium, accessibility.form_labels_missing)
  - Detail: 16 text-like inputs and 11 labels were found.
  - Fix: Associate every input with a visible label or accessible aria-label.
- Buttons may lack accessible names (Accessibility, medium, accessibility.buttons_missing_accessible_names)
  - Detail: 4 button(s) appear to have no text or aria-label.
  - Fix: Add visible button text or aria-label for icon-only buttons.
- Slow initial HTML response (Performance, medium, performance.slow_initial_html_response)
  - Detail: The initial fetch took about 5129ms.
  - Fix: Check server response time, CDN caching, redirects, and backend bottlenecks.
  - Fix guide: https://themerella.com/fix/slow-initial-html-response/

Generated by Themerella Website Scanner.