Ngā pane haumaru i te 2026: 3 i ia 4 paetukutuku kāore he Content-Security-Policy
Ngā pane haumaru i te 2026: 3 i ia 4 paetukutuku kāore he Content-Security-Policy
Ko ngā pane haumaru (security headers) he rārangi torutoru i roto i te whakautu a te tūmau e kī ana ki te pūtirotiro me pēhea te kaha o tana tiaki i tētahi whārangi. Kāore he utu o te tuku, ka tiaki rātou i ngā manuhiri i te clickjacking, i te ihirangi whakaranu me te werohanga hōtuhi, ā, he wāhanga rātou o te kaute haumaru i ia arotake a LANGR SEO. I roto i ā mātou raraunga, ko rātou anō te kōwae iti rawa te kaute: he kaute waenga 40 i te 100.
I ahu mai ngā tau i te arotake hou rawa o ngā paetukutuku 94,853 i whakautu ki tā mātou pūmatawai i waenga i a Āperira me Oketopa 2026.
E hia ngā pae e tuku ana i ia pane
| Pane | Ngā pae e tuku ana |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Kāore tētahi pane kotahi e tae ana ki te haurua o ngā pae. Kua ngaro te HSTS i te 58.1%, arā, ka taea tonu te whakaheke i te toronga tuatahi ki te HTTP noa. Hei āpiti atu, 17.7% o ngā pae kāore rawa e tuku ana i te HTTP ki te HTTPS.
Mā tō tūāpapa te nuinga e whakatau
| Tūāpapa | Ngā pae | Kāore he Content-Security-Policy |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Kāore he CMS i kitea | 60,583 | 77.3% |
Ka tukua e Shopify he CSP mō ia toa, nā reira tata kore he pae Shopify e ngaro ana. I runga i a WordPress me te nuinga o ngā pūnaha toa e manaakitia ana e rātou anō, ka whakawhirinaki ngā pane ki te kaimanaaki, ki tētahi mono rānei, ā, kāore te nuinga o ngā pae e whiwhi i a rātou. Mēnā kei te whakamahi koe i a WordPress, he nui ake te hiranga o tō whakaritenga manaaki i tō kaupapa hoahoa i konei.
Ngā rārangi e rima e kati ana i te nuinga o te āputa
He haumaru ēnei pane mō te tata katoa o ngā pae, ā, ka taea te tāpiri ki te tūmau tukutuku, ki tētahi CDN pērā i a Cloudflare, mā tētahi mono haumaru rānei:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Me āta whakaaro ake ki te Content-Security-Policy, nā te mea ka taea e tētahi kaupapa here pakari te aukati i ōu ake hōtuhi. Tīmata ki te Content-Security-Policy-Report-Only, tirohia ngā mea ka aukatia e ia, kātahi ka huri ki te pane tūturu ina mā ngā pūrongo.
Ka pā ngā pane haumaru ki ngā tūranga rapu?
Kāore i te tika tonu. Kua whakaū a Google i te HTTPS hei tohu tūranga, engari kāore ngā pane takitahi. Heoi anō, he hira tonu rātou mō te SEO i te mahi: ka tere ngaro ngā tūranga o tētahi pae kua tāhaetia, kua werohia ki ngā hono pāmu, ā, ka whakatūpato ngā pūtirotiro i ngā manuhiri kia matara atu i ngā whārangi e uta ana i te ihirangi kāore i te haumaru.
Whakahaerehia he arotake SEO utu kore kia kite tika ai ko ēhea pane e tukuna ana e tō pae, me tētahi whakatika rite mō ia pane e ngaro ana. Kua whakamāramahia ngā kupu i te SEO mai i te A ki te Z.
Tikanga: te arotake katoa hou rawa mō ia rohe, ngā paetukutuku 94,853 he hua pane ō rātou, i kohia mai i a Āperira ki a Oketopa 2026, ko te nuinga he rohe katahi anō ka rēhitatia me ngā rohe pakihi iti i ngā mākete whenua 15. Kua waiho atu ngā tūāpapa kei raro iho i te 100 ngā pae, ā, kāore he rohe takitahi e whakaingoatia ana.