Avoid Meta Refresh

ID

html.meta_refresh

Severity

low

Remediation Complexity

low

Remediation Risk

low

Remediation Effort

low

Resource

Reliability

Language

Html

Tags

accessibility, reliability

Description

Flags a <meta> element whose http-equiv attribute equals refresh (case-insensitive).

Rationale

A meta refresh reloads or redirects the page after a fixed delay that the user can neither pause nor extend. This disorients users, interrupts screen readers mid-sentence, and can trap people who need more time to read the content. Time limits should be under the user’s control.

<meta http-equiv="refresh" content="5"> <!-- FLAW — timed reload -->

<meta charset="utf-8">                   <!-- OK — no refresh -->

Remediation

Remove the meta refresh. Perform redirects server-side (HTTP 3xx) and let users trigger reloads themselves, or provide an explicit control to do so.