` tag and a 'Skip to content' link at the top. **2B. Add H1 and Meta Description** `SEO` - **Impact:** Search ranking, CTR - **Problem:** W3C reports 0 H1 elements; SEO audit flags missing meta description. - **Solution:** Ensure exactly one `

` per page reflecting the main topic. Add `` summarizing the newsroom content. 2C. Complete HSTS Configuration `Security` - Impact: Transport security - Problem: HSTS header present but missing `includeSubDomains` and `preload` directives. - Solution: Update server config to include subdomains and preload flag. ```http Strict-Transport-Security: max-age=63072000; includeSubDomains; preload ``` 2D. Add a single H1 element to the page `SEO` - Impact: Document outline, Search ranking - Problem: HTML inventory shows 0 H1 elements; page starts with H2. W3C validator notes heading structure issues. - Solution: Ensure the main page title is wrapped in a single `

` tag at the top of the content flow. ```html

Videod - Sorainen

``` **2E. Fix HTML validation errors and duplicate IDs** `Best Practices` - **Impact:** Code quality, Rendering consistency - **Problem:** W3C validator reports 7 errors including duplicate ID 'select-kapitaliturud' and malformed attributes (e.g., 'stylr'). - **Solution:** - Ensure all IDs are unique. - Correct attribute typos (e.g., `stylr` → `style`). - Fix empty `href` attributes on `` elements. **2F. Add a unique H1 heading** `SEO` - **Impact:** Document outline, Search ranking - **Problem:** HTML Inventory confirms 0 `

` elements; W3C notes no heading level 1. - Solution: Ensure the page title is wrapped in a single `

` tag at the top of the main content. ```html

Ziņas

``` **2G. Harden HSTS and review CSP** `Security` - **Impact:** Transport security, XSS defense - **Problem:** HSTS missing `includeSubDomains`; CSP allows `unsafe-inline` and `unsafe-eval`. - **Solution:** Update HSTS header to include subdomains. For CSP, remove `unsafe-inline` where possible or use nonces. ```apache Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" ``` **2H. Strengthen HSTS header** `Security` - **Impact:** Transport security, downgrade attacks - **Problem:** HSTS present but missing `includeSubDomains` and `preload` directives (Grade 40/100). - **Solution:** Update server config to include subdomains and preload flag. ```apache Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" ``` **2I. Add H1 and Main landmark** `SEO` - **Impact:** Document outline, Screen readers - **Problem:** 0 `

` elements and missing `
` landmark detected in HTML inventory. - Solution: Ensure exactly one `
` per page and wrap primary content in `
`. ```html
Naujienos

...
``` ### Priority 3: Best Practice Recommended for long-term maintainability. 3A. Reduce image weight and add dimensions `Performance` - Impact: CLS, Page Weight (2.67 MB) - Problem: 16 images missing width/height attributes; 19 images missing lazy loading. - Solution: - Add `width` and `height` attributes to all `` tags. - Ensure `loading="lazy"` is present on off-screen images. - Convert remaining PNG/JPEG to WebP/AVIF. 3B. Fix HTML validation errors `Best Practices` - Impact: Code quality, Rendering consistency - Problem: W3C reports 11 errors including duplicate IDs and invalid attributes (e.g., `stylr`). - Solution: Audit the HTML source for duplicate `id` attributes and correct typos in attribute names. Ensure unique IDs for form elements. 3C. Harden Content Security Policy `Security` - Impact: XSS defense-in-depth - Problem: CSP allows `unsafe-inline` and `unsafe-eval`, which bypasses XSS protections. - Solution: Replace `unsafe-inline` with nonce/hash strategy for scripts and styles. ```apache Content-Security-Policy: script-src 'nonce-{random}' 'strict-dynamic'; ```

` tag at the top of the content flow. ```html

Videod - Sorainen

` elements; W3C notes no heading level 1. - **Solution:** Ensure the page title is wrapped in a single `

` tag at the top of the main content. ```html

Ziņas

Naujienos

` elements; W3C notes no heading level 1. - Solution: Ensure the page title is wrapped in a single `