Ma header a chitetezo mu 2026: mawebusayiti 3 mwa 4 alibe Content-Security-Policy
Ma header a chitetezo mu 2026: mawebusayiti 3 mwa 4 alibe Content-Security-Policy
Ma header a chitetezo ndi mizere yochepa mu yankho la seva yomwe imauza msakatuli momwe angakhalire okhwima ndi tsamba. Kuwatumiza sikulipira kanthu, amateteza alendo ku clickjacking, zinthu zosakanikirana ndi kulowetsa ma script, ndipo ndi mbali ya chigoli cha chitetezo m'kuwunika kulikonse kwa LANGR SEO. M'deta yathu alinso gawo lokhala ndi zigoli zotsika kwambiri: chigoli chapakati ndi 40 mwa 100.
Ziwerengerozi zikuchokera pa kuwunika kwaposachedwa kwa mawebusayiti 94,853 omwe anayankha chosanthula chathu pakati pa Epulo ndi Okutobala 2026.
Ndi mawebusayiti angati omwe amatumiza header iliyonse
| Header | Mawebusayiti omwe amaitumiza |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Palibe header ngakhale imodzi yomwe imafika theka la mawebusayiti. HSTS ikusowa pa 58.1%, kutanthauza kuti ulendo woyamba ukhozabe kutsitsidwa kupita ku HTTP wamba. Kuwonjezera apo, 17.7% ya mawebusayiti sakutumiza HTTP ku HTTPS n'komwe.
Nsanja yanu ndi imene imasankha zambiri
| Nsanja | Mawebusayiti | Palibe Content-Security-Policy |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Palibe CMS yomwe yapezeka | 60,583 | 77.3% |
Shopify imatumiza CSP pa sitolo iliyonse, choncho pafupifupi palibe webusayiti ya Shopify yomwe ilibe. Pa WordPress ndi machitidwe ambiri a masitolo omwe mumadzisungira nokha, ma header amadalira wosunga webusayiti kapena plugin, ndipo mawebusayiti ambiri sawapeza konse. Ngati mumagwiritsa ntchito WordPress, makonzedwe a hosting yanu ndi ofunika kwambiri kuposa theme yanu pankhaniyi.
Mizere isanu yomwe imatseka kusowa kwakukulu
Ma header awa ndi otetezeka pafupifupi pa webusayiti iliyonse ndipo akhoza kuwonjezeredwa mu seva ya webusayiti, CDN ngati Cloudflare kapena plugin ya chitetezo:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy imafuna kusamala kwambiri, chifukwa ndondomeko yokhwima ikhoza kuletsa ma script anu omwe. Yambani ndi Content-Security-Policy-Report-Only, onani zomwe ikanaletsa, ndipo sinthani kupita ku header yeniyeni malipoti akakhala oyera.
Kodi ma header a chitetezo amakhudza malo pa zotsatira zosakira?
Osati mwachindunji. Google yatsimikizira HTTPS ngati chizindikiro cha malo pa zotsatira, koma osati ma header amodzimodzi. Komabe, m'zochitika ndi ofunikabe pa SEO: webusayiti yobedwa yokhala ndi maulalo a spam olowetsedwa imataya malo mwachangu, ndipo masakatuli amachenjeza alendo kuti asapite ku masamba omwe amatsegula zinthu zosatetezeka.
Chitani kuwunika kwa SEO kwaulere kuti muone ndendende ma header omwe webusayiti yanu imatumiza, pamodzi ndi kukonza kokonzeka pa header iliyonse yomwe ikusowa. Mawuwa afotokozedwa mu SEO kuyambira A mpaka Z.
Njira: kuwunika kokwanira kwaposachedwa pa domeni iliyonse, mawebusayiti 94,853 okhala ndi zotsatira za ma header, zosonkhanitsidwa kuyambira Epulo mpaka Okutobala 2026, makamaka madomeni olembetsedwa kumene ndi a mabizinesi ang'onoang'ono m'misika ya mayiko 15. Nsanja zokhala ndi mawebusayiti ochepera 100 sizinaphatikizidwe, ndipo palibe domeni iliyonse imene yatchulidwa dzina.