Sekiuriti header long 2026: 3 long 4 websaet oli no gat Content-Security-Policy
Sekiuriti header long 2026: 3 long 4 websaet oli no gat Content-Security-Policy
Sekiuriti header hemi sam laen long ansa blong sava we i talem long brausa hamas hem i mas strong wetem wan pej. Oli no kostem wan samting blong sendem, oli protektem ol visita agensem clickjacking, miks kontent mo skript injeksen, mo oli pat blong sekiuriti skoa long evri audit blong LANGR SEO. Long data blong mifala, oli modiul tu we i gat skoa we i daon moa: midel skoa (median) blong 40 long 100.
Ol namba oli kamaot long laswan audit blong 94,853 websaet we oli ansa long skana blong mifala bitwin Epril mo Oktoba 2026.
Hamas saet oli sendem evri header
| Header | Ol saet we oli sendem |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
I no gat wan header we i kasem haf blong ol saet. HSTS i no stap long 58.1%, hemia i minim se fas visit i save go daon yet long plen HTTP. Antap long hemia, 17.7% blong ol saet oli no redirect HTTP i go long HTTPS nating.
Platfom blong yu i disaed bigfala pat
| Platfom | Ol saet | I no gat Content-Security-Policy |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Mifala i no faenem CMS | 60,583 | 77.3% |
Shopify i sendem wan CSP blong evri stoa, taswe klosap i no gat wan Shopify saet we i no gat. Long WordPress mo plante stoa sistem we man i hostem hem wan, ol header oli dipen long host o long wan plugin, mo plante saet oli neva kasem olgeta. Sapos yu yusum WordPress, seting blong hosting blong yu i impoten moa long tim blong yu long ples ia.
Faef laen we i fasem bigfala pat blong hol
Ol header ia oli sef blong klosap evri saet, mo yu save putum olgeta long web sava, long wan CDN olsem Cloudflare o long wan sekiuriti plugin:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Wan Content-Security-Policy i nidim moa kea, from se wan strong polisi i save blokem ol skript blong yu nomo. Stat wetem Content-Security-Policy-Report-Only, luk wanem samting bae hem i blokem, mo jenis i go long stret header taem ol ripot oli klin.
Ol sekiuriti header oli jenisim ranking?
I no stret. Google i talem finis se HTTPS hemi wan ranking saen, be i no talem olsem long evri header wanwan. Be long laef, oli impoten yet long SEO: wan saet we man i hakem mo putum ol spam link insaed, i lusum ranking kwiktaem, mo ol brausa oli wonem ol visita blong no go long ol pej we oli lodem kontent we i no sef.
Ronem wan fri SEO audit blong luk stret wanem header saet blong yu i sendem, wetem wan fiks we i redi finis blong evri header we i no stap. Ol tok oli eksplenem long SEO A kasem Z.
Fasin blong wok: laswan fulwan audit blong evri domen, 94,853 websaet we oli gat header risal, mifala i hivimap long Epril kasem Oktoba 2026, plante long olgeta oli niu domen mo domen blong smol bisnis long 15 maket blong ol kantri. Ol platfom we oli gat andanit long 100 saet mifala i livim aot, mo mifala i no talem nem blong eni domen.