manti-by / manti.by Goto Github PK

Upgrade Pillow to version 6.2.2 or later.

X-XSS-Protection - Mitigates Cross-Site Scripting (XSS) attacks
Strict-Transport-Security - Protects against man-in-the-middle attacks
X-Content-Type-Options - Prevents possible phishing or XSS attacks

• Setup support for HTTP/2 with SSL
  https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-with-http-2-support-on-ubuntu-16-04

• Update jQuery version

• Add [alt] attribute to all links:

  https://dequeuniversity.com/rules/axe/2.2/link-name

• Add [alt] attribute to all images:

  https://developer.paciellogroup.com/blog/2017/04/what-is-an-accessible-name/

• Serve images in next-gen formats:

  JPEG 2000, JPEG XR, and WebP are image formats that have superior compression and quality
  characteristics compared to their older JPEG and PNG counterparts. Encoding your images in these
  formats rather than JPEG or PNG means that they will load faster and consume less cellular data.

  https://developers.google.com/web/tools/lighthouse/audits/webp

• https://sentry.io/organizations/manti/issues/1597342391/
• https://sentry.io/organizations/manti/issues/1597327781/

• Add on focus event or search
• Add search result selection using keyboard controls

Also check frontpage items

https://habr.com/company/2gis/blog/345552/

https://github.com/manti-by/Manti.by/blob/master/app/core/middleware/language.py#L12
https://sentry.io/manti/manti-by/issues/701776440/

User-agent: Yandex
Host: manti.by

User-agent: *

Sitemap: http://manti.by/sitemap.xml

TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)   WEAK | 256
TLS_RSA_WITH_AES_256_CCM_8 (0xc0a1)   WEAK | 256
TLS_RSA_WITH_AES_256_CCM (0xc09d)   WEAK | 256
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)   WEAK | 128
TLS_RSA_WITH_AES_128_CCM_8 (0xc0a0)   WEAK | 128
TLS_RSA_WITH_AES_128_CCM (0xc09c)   WEAK | 128
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d)   WEAK | 256
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (0xc0)   WEAK | 256
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)   WEAK | 128
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (0xba)   WEAK | 128
TLS_RSA_WITH_AES_256_CBC_SHA (0x35)   WEAK | 256
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x84)   WEAK | 256
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)   WEAK | 128
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x41)   WEAK | 128

The HTML document must contain a valid lang attribute or must correspond to a valid lang code for multilingual screen reader users who may prefer a language other than the default.

https://dequeuniversity.com/rules/axe/2.2/html-has-lang

The src attribute of the img tag is replaced with a data-src attribute in the markup:

<img data-src="image.jpg" alt="test image">

In the CSS, img elements with a data-src attribute are hidden. Once loaded, images will appear with a nice fade-in effect using CSS transitions:

img {
  opacity: 1;
  transition: opacity 0.3s;
}

img[data-src] {
  opacity: 0;
}

JavaScript then adds the src attribute to each img element and gives it the value of their respective data-src attributes. Once images have finished loading, the script removes the data-src attribute from img elements altogether:

[].forEach.call(document.querySelectorAll('img[data-src]'),    function(img) {
  img.setAttribute('src', img.getAttribute('data-src'));
  img.onload = function() {
    img.removeAttribute('data-src');
  };
});