Somes SEO, performance and security issues with the demo website.

[borisschapira]

Great job, interns. Much more interesting that what I've done when I interned at Microsoft France.

In order to optimize the template, I've launched a dareboost analysis and it seems that there are some issues with the demo website, not necessarily relative to the blog template but with the web server configuration.

Regarding the blog template:

• Add an

  title in your content

• You should define a 'description' meta tag
• Set a lang for your page
• Avoid CSS @import (especialy for third-party inclusions, you may provoke a SPOF)

Regarding the web server configuration:

• Always redirect users using the HTTP version of the page to the HTTPs version.
• Add a Content Security Policy
• Secure your cookies
• Add an X-Frame-Options directive to fight clickjacking.

I hope that will help you or the community improve this template. Details are available in the report.