All css in two files
Minifying css
CDN
Mifiying javascript
Gzip
Google Fonts
SQL injections
Javascript in messages