Google gets a C. Here's what loads before you agree

What cost it points

• high

  Screen readers can't describe these images.

• high

  Buttons don't say what they do.

• medium

  A first visit can be downgraded to unencrypted.

• medium

  One hijacked script could reach the whole page.

• medium

  The bare address can open an unencrypted page.

• low

  Your browser may guess file types attackers can abuse.

• low

  Keyboard users can't skip the menu.

• low

  Embedded frames have no names.

• low

  Headings don't outline the page.

• low

  Full page addresses can leak to third parties.