Ebiwandiiko by'obukuumi (security headers) mu 2026: emikutu 3 ku buli 4 tegirina Content-Security-Policy
Ebiwandiiko by'obukuumi (security headers) mu 2026: emikutu 3 ku buli 4 tegirina Content-Security-Policy
Ebiwandiiko by'obukuumi nnyiriri ntono mu kuddamu kwa seeva ebigamba browser obukakali bw'esaanidde okuba nabwo ku lupapula. Tebirina kye bisaasaanya okubisindika, bikuuma abakyalira omukutu ku clickjacking, ebirimu ebitabuddwamu n'okuyingizibwa kwa scripts, era kitundu ku bubonero bw'obukuumi mu buli kukebera kwa LANGR SEO. Mu data yaffe, era kye kitundu ekirina obubonero obusinga okuba wansi: obw'omu makkati 40 ku 100.
Ebibalo biva mu kukebera okusembayo okw'emikutu 94,853 egyaddamu ekyuma kyaffe ekikebera wakati wa Apuli ne Okitobba 2026.
Emikutu emeka egisindika buli header
| Header | Emikutu egigisindika |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Tewali header n'emu etuuka ku kitundu ky'emikutu. HSTS tebaawo ku 58.1%, ekitegeeza nti okukyala okusooka kukyayinza okussibwa wansi ku HTTP eya bulijjo. Ku ekyo kwossa, emikutu 17.7% tegisindika HTTP ku HTTPS n'akatono.
Platform yo y'esalawo ebisinga
| Platform | Emikutu | Tewali Content-Security-Policy |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Tewali CMS ezuuliddwa | 60,583 | 77.3% |
Shopify esindika CSP ku buli dduuka, noolwekyo kumpi tewali mukutu gwa Shopify ogutagirina. Ku WordPress ne ku nkola z'amaduuka ezisinga z'okuumira ggwe kennyini, headers zisinziira ku akuumira omukutu (host) oba ku plugin, era emikutu egisinga tegizifuna n'akatono. Bw'oba okozesa WordPress, wano enteekateeka y'okukuuma omukutu (hosting) yo ekulu okusinga theme yo.
Ennyiriri ettaano eziggala ekituli ekisinga obunene
Headers zino tezirina buzibu ku kumpi buli mukutu era zisobola okwongerwa mu web server, mu CDN nga Cloudflare oba okuyita mu plugin y'obukuumi:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy yeetaaga okwegendereza okusingawo, kubanga enkola enkakali esobola okuziyiza scripts zo ggwe kennyini. Tandika ne Content-Security-Policy-Report-Only, laba kye yandiziyizza, era okyuse ogende ku header entuufu lipoota bwe ziba nga nnongoofu.
Ebiwandiiko by'obukuumi bikosa ekifo ky'omukutu mu kunoonya?
Si butereevu. Google yakakasa HTTPS ng'akabonero k'okusengeka emikutu, naye si buli header kinnoomu. Wabula mu nkola bikyali bikulu eri SEO: omukutu ogwayingiddwamu ababbi ne guteekebwamu link za spam gufiirwa ekifo kyagwo mangu, era browsers zirabula abakyala okwewala empapula ezitikka ebirimu ebitali bya bukuumi.
Kola okukebera SEO okw'obwereere olabe ddala headers ki omukutu gwo ze gusindika, n'eddagala eryetegefu ku buli emu ebulawo. Ebigambo binnyonnyolwa mu SEO okuva ku A okutuuka ku Z.
Enkola: okukebera okujjuvu okusembayo okwa buli domeeni, emikutu 94,853 egirina ebyavudde mu headers, byakuŋŋaanyizibwa okuva mu Apuli okutuuka mu Okitobba 2026, okusinga domeeni empya ezaakawandiisibwa ne domeeni za bizinensi entono mu butale bw'ensi 15. Platform ezirina emikutu egitassukka 100 zalekeddwa bweru, era tewali domeeni yonna emu eyogerwako mu linnya.