Security headers muna 2026: mawebhusaiti 3 pa4 haana Content-Security-Policy
Security headers muna 2026: mawebhusaiti 3 pa4 haana Content-Security-Policy
Security headers mitsara mishoma mumhinduro yeserver inoudza browser kuti ive yakasimba zvakadii nepeji. Hazvidhure chinhu kuzvitumira, zvinodzivirira vashanyi pakubiridzirwa kwekudzvanya (clickjacking), zvinhu zvakasanganiswa nekupinzwa kwemascript, uye zvikamu zvemamaki ekuchengeteka muongororo imwe neimwe yeLANGR SEO. Muruzivo rwedu ndiyo zvakare module ine mamaki akaderera kupfuura dzose: median ye40 kubva pa100.
Nhamba idzi dzinobva kuongororo ichangoburwa yemawebhusaiti 94,853 akapindura scanner yedu pakati paKubvumbi naGumiguru 2026.
Masaiti mangani anotumira header imwe neimwe
| Header | Masaiti anoitumira |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Hapana kana header imwe inosvika hafu yemasaiti. HSTS haipo pa58.1%, zvinoreva kuti kushanya kwekutanga kuchiri kugona kuderedzwa kuenda kuHTTP yakajairika. Pamusoro pezvo, 17.7% yemasaiti haitendeuki HTTP kuenda kuHTTPS zvachose.
Puratifomu yako ndiyo inosarudza zvakawanda
| Puratifomu | Masaiti | Hapana Content-Security-Policy |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Hapana CMS yakaonekwa | 60,583 | 77.3% |
Shopify inotumira CSP yechitoro chimwe nechimwe, saka anenge hapana saiti yeShopify isina. PaWordPress nemasisitimu mazhinji ezvitoro anozvichengetera, headers dzinoenderana nemuchengeti (host) kana plugin, uye masaiti mazhinji haambozviwani. Kana uchishandisa WordPress, magadzirirwo ehosting yako akakosha kupfuura theme yako pano.
Mitsara mishanu inovhara chikamu chikuru chegaro
Headers idzi dzakachengeteka kune anenge saiti ipi neipi uye dzinogona kuwedzerwa muwebhu server, muCDN yakaita seCloudflare kana muplugin yekuchengeteka:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy inoda kuchenjerera kwakawanda, nekuti mutemo wakasimba unogona kuvharira mascript ako pachako. Tanga neContent-Security-Policy-Report-Only, tarisa zvaingavharira, wozochinjira kuheader chaiyo kana mishumo yachena.
Security headers dzinokanganisa here nzvimbo mukutsvaga?
Kwete zvakananga. Google yakasimbisa HTTPS sechiratidzo chenzvimbo, asi kwete headers imwe neimwe. Asi dzichiri kukosha kuSEO muchokwadi: saiti yakabirwa ine malink espam akapinzwa inorasikirwa nenzvimbo nekukurumidza, uye mabrowser anoyambira vashanyi kuti vasapinda mumapeji anotakura zvinhu zvisina kuchengeteka.
Ita ongororo yeSEO yemahara kuti uone chaizvo headers dzinotumirwa nesaiti yako, uine gadziriso yakagadzirira yeimwe neimwe isipo. Mazwi aya anotsanangurwa muSEO A kusvika Z.
Nzira: ongororo yakazara ichangoburwa yedomeni rimwe nerimwe, mawebhusaiti 94,853 ane mhedzisiro yeheaders, zvakaunganidzwa kubva muna Kubvumbi kusvika Gumiguru 2026, kunyanya madomeni achangonyoreswa nemadomeni emabhizinesi madiki mumisika yenyika 15. Mapuratifomu ane masaiti asingasviki 100 akasiyiwa, uye hapana domeni rimwe chete rinodomwa.