Ba header ya libateli na 2026: ba site 3 kati na 4 ezali na Content-Security-Policy te
Ba header ya libateli na 2026: ba site 3 kati na 4 ezali na Content-Security-Policy te
Ba header ya libateli (security headers) ezali milongo moke na eyano ya serveur oyo eyebisaka navigateur ndenge nini esengeli kozala makasi na lokasa moko. Kotinda yango esengaka mbongo te, ebatelaka bato oyo bayei kotala na clickjacking, makambo ya kosangisama (mixed content) mpe bokotisi ya ba script, mpe ezali ndambo ya score ya libateli na botaleli nyonso ya LANGR SEO. Na ba données na biso, ezali mpe module oyo ezali na score ya nse koleka: médiane ya 40 na 100.
Ba motuya euti na botaleli ya nsuka ya ba site internet 94.853 oyo ezongiselaki scanner na biso eyano banda sánzá ya mínei tii sánzá ya zómi 2026.
Ba site boni etindaka header moko na moko
| Header | Ba site oyo etindaka yango |
|---|---|
| X-Content-Type-Options | 47,6 % |
| X-Frame-Options | 44,8 % |
| Strict-Transport-Security (HSTS) | 41,9 % |
| Referrer-Policy | 25,6 % |
| Content-Security-Policy | 23,5 % |
| Permissions-Policy | 8,4 % |
Header moko te ekokaka ndambo ya ba site. HSTS ezangi na 58,1 %, elingi koloba ete bokotí ya liboso ekoki naino kokitisama na HTTP ya pamba. Na likolo ya yango, 17,7 % ya ba site etindaka HTTP na HTTPS ata moke te.
Plateforme na yo nde ekataka mingi
| Plateforme | Ba site | Content-Security-Policy ezali te |
|---|---|---|
| Shopify | 4.411 | 2,6 % |
| Squarespace | 348 | 85,3 % |
| WordPress | 25.703 | 83,3 % |
| PrestaShop | 1.205 | 90,4 % |
| OpenCart | 455 | 94,3 % |
| Wix | 119 | 97,5 % |
| CMS emonanaki te | 60.583 | 77,3 % |
Shopify etindaka CSP mpo na magazini nyonso, yango wana pene na site moko te ya Shopify ezangi yango. Na WordPress mpe na ba système mingi ya magazini oyo bato babatelaka yango moko, ba header etalelaka hébergeur to plugin moko, mpe ba site mingi ezwaka yango soko moke te. Soki osalelaka WordPress, awa ba paramètres ya hébergement na yo ezali na ntina koleka thème na yo.
Milongo mitano oyo ekangaka ndambo monene ya mpasi
Ba header oyo ezali na likama te mpo na pene ya site nyonso mpe ekoki kobakisama na serveur web, na CDN lokola Cloudflare to na plugin moko ya libateli:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy esengaka bokebi mingi, mpo politique ya makasi ekoki kopekisa ata ba script na yo moko. Banda na Content-Security-Policy-Report-Only, tala nini ekokaki kopekisa, mpe kende na header ya solo ntango ba rapport ezali peto.
Ba header ya libateli ezali na bopusi na esika ya site na boluki?
Mbala moko te. Google endimaki HTTPS lokola elembo ya esika na boluki, kasi ba header moko moko te. Atako bongo, na misala ya mikolo nyonso ezali na ntina mpo na SEO: site oyo ba hacker bakotelaki mpe bakotisaki ba lien ya spam ebungisaka esika na yango noki, mpe ba navigateur ekebisaka bato oyo bayei kotala bakima ba lokasa oyo ezali kofungola makambo oyo ezali na libateli te.
Sala botaleli ya SEO ya ofele mpo na komona malamu ba header nini site na yo etindaka, elongo na bobongisi oyo ezali kozela mpo na moko na moko oyo ezangi. Maloba elimbolami na SEO banda A tii Z.
Lolenge ya mosala: botaleli mobimba ya nsuka mpo na domaine moko na moko, ba site internet 94.853 oyo ezali na eyano ya header, basangisaki yango banda sánzá ya mínei tii sánzá ya zómi 2026, mingi ba domaine oyo bakomisaki sika mpe ba domaine ya ba mombongo ya mike na ba zando ya mikili 15. Ba plateforme oyo ezali na ba site moke koleka 100 elongolami, mpe nkombo ya domaine moko te etangami.