Ama-header wokuphepha ngo-2026: iwebhusayidi ezi-3 kwezi-4 azinayo i-Content-Security-Policy
Ama-header wokuphepha ngo-2026: iwebhusayidi ezi-3 kwezi-4 azinayo i-Content-Security-Policy
Ama-header wokuphepha migqa embalwa ephendulweni leseva etjela isiphenyi (browser) bona sibe namthetho ongakanani ngekhasi. Akubizi litho ukuwathumela, avikela abavakatjhi ku-clickjacking, ekuqukethweni okuhlanganisiweko nekufakweni kwama-script, begodu ayingcenye yamaphuzu wokuphepha ehlolweni ngalinye le-LANGR SEO. Edathenethu, ayisigaba esinamaphuzu aphasi khulu: inani elisesiqiwini lama-40 ku-100.
Amanani avela ehlolweni lakamuva leewebhusayidi ezi-94 853 eziphendule isihloli sethu phakathi kwaka-Apreli no-Oktoba 2026.
Mingaki iinsayidi ezithumela i-header ngayinye
| I-header | Iinsayidi eziyithumelako |
|---|---|
| X-Content-Type-Options | 47,6% |
| X-Frame-Options | 44,8% |
| Strict-Transport-Security (HSTS) | 41,9% |
| Referrer-Policy | 25,6% |
| Content-Security-Policy | 23,5% |
| Permissions-Policy | 8,4% |
Ayikho i-header nayinye efikelela esiquntwini seensayidi. I-HSTS ayikho kuma-58,1%, lokho kutjho bona ukuvakatjha kokuthoma kusengehliselwa ku-HTTP ejayelekileko. Ngaphezu kwalokho, ama-17,7% weensayidi akadluliseli i-HTTP ku-HTTPS nakancani.
Ipulatifomu yakho ilawula ingcenye ekulu
| Ipulatifomu | Iinsayidi | Ayikho i-Content-Security-Policy |
|---|---|---|
| Shopify | 4 411 | 2,6% |
| Squarespace | 348 | 85,3% |
| WordPress | 25 703 | 83,3% |
| PrestaShop | 1 205 | 90,4% |
| OpenCart | 455 | 94,3% |
| Wix | 119 | 97,5% |
| Ayikho i-CMS etholakeleko | 60 583 | 77,3% |
I-Shopify ithumela i-CSP yesitolo ngasinye, ngalokho cishe ayikho isayidi ye-Shopify engenayo. Ku-WordPress nemahlelweni weentolo amanengi azisingathako, ama-header ancika kosingathi namkha ku-plugin, begodu iinsayidi ezinengi azitholi ama-header la. Nawusebenzisa i-WordPress, ihlelo lakho lokusingathwa liqakatheke ukudlula i-theme yakho lapha.
Imigqa emihlanu evala ingcenye ekulu yesikhala
Ama-header la aphephile cishe kiyo yoke iinsayidi begodu angafakwa eseveni yewebhu, ku-CDN efana ne-Cloudflare namkha nge-plugin yokuphepha:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()I-Content-Security-Policy ifuna ukuqaphelisisa okukhulu, ngombana umbandela oqinileko ungavimba ama-script wakho. Thoma nge-Content-Security-Policy-Report-Only, ubone ukuthi bewuzokuvimba yini, bese utjhugulukela ku-header yamambala lokha imibiko ihlwengekile.
Ama-header wokuphepha anomthelela ezingeni lokufumaneka na?
Ingasi ngqo. I-Google iqinisekisile i-HTTPS njengetjhwayo lezinga, kodwana ingasi ama-header ngamunye. Nanyana kunjalo, aqakathekile ku-SEO emsebenzini: isayidi engenwe ngabagebengu begodu enamalinki we-spam afakiweko ilahlekelwa mazinga msinyana, begodu iimphenyi ziyelelisa abavakatjhi ngamakhasi alayitha okuqukethwe okungaphephiko.
Senza ihlolo le-SEO simahla ubone ngqo bona ngimaphi ama-header isayidi yakho ewathumelako, nesilungiso esilungeleko se-header ngayinye engekho. Amabizo ahlathululwa ku-SEO kusukela ku-A ukuya ku-Z.
Indlela: ihlolo elipheleleko lakamuva le-domeni ngayinye, iwebhusayidi ezi-94 853 ezinomphumela wama-header, kubuthelelwe ukusuka ku-Apreli ukuya ku-Oktoba 2026, khulukhulu iindomeni ezisanda ukutlolisa neendomeni zamabhizinisi amancani emamakethe wamazwe ali-15. Iipulatifomu ezineensayidi ezingaphasi kwezi-100 zikhutjhiwe, begodu ayikho i-domeni etjhiwo ngebizo.