{"url":"https://php85.gotoand.dev/larsen","date":"2026-06-30","siteName":"Viga 401 - Error 401 | Veebimajutus.ee","overall":45,"reasoning":"PSI mobile 94 indicates excellent code performance, but the HTTP 401 status blocks public access, creating a critical functional failure. Security headers are completely missing (0/100), and accessibility has a serious contrast violation. The site appears to be a staging environment given the 401 challenge and dev subdomain, but for production readiness, these must be fixed.","confidence":"high","fixes":[{"priority":1,"title":"Resolve HTTP 401 Unauthorized Status","impact":"Site Accessibility, SEO","problem":"The server returns a 401 status with Basic Auth challenge (www-authenticate: Basic), blocking public access and failing the PSI http-status-code audit.","solution":"If this is a public site, remove server-side authentication (Basic Auth) from the web server config (e.g., `.htaccess` or Nginx config). If it must remain private, ensure the URL is not indexed and provide a public landing page."},{"priority":1,"title":"Implement Baseline Security Headers","impact":"Transport Security, Clickjacking, MIME Sniffing","problem":"Security Headers score is 0/100; HSTS, X-Frame-Options, and X-Content-Type-Options are missing.","solution":"Add the following headers to the server response:\n```apache\nHeader always set Strict-Transport-Security \"max-age=63072000; includeSubDomains\"\nHeader always set X-Frame-Options \"SAMEORIGIN\"\nHeader always set X-Content-Type-Options \"nosniff\"\n```"},{"priority":2,"title":"Fix Accessibility Violations (Contrast & Landmarks)","impact":"WCAG 1.4.3, 1.3.1, 2.4.1","problem":"axe-core reports 1 serious color-contrast violation and missing main landmark; W3C shows 3 h1 elements.","solution":"- Increase contrast on `.navbar-nav` links to ≥4.5:1.\n- Wrap main content in `
` and navigation in `