Header-yada amniga sannadka 2026: 3 ka mid ah 4 website ma laha Content-Security-Policy
Header-yada amniga sannadka 2026: 3 ka mid ah 4 website ma laha Content-Security-Policy
Header-yada amnigu waa dhowr sadar oo ku jira jawaabta server-ka kuwaas oo u sheega browser-ka inta uu ku adkaanayo bog. Dirintoodu waxba kuma kacdo, waxay booqdayaasha ka ilaaliyaan clickjacking, nuxur isku dhafan iyo qoraallo (scripts) la galiyo, waxayna qayb ka yihiin dhibcaha amniga ee baaritaan kasta oo LANGR SEO ah. Xogtayada dhexdeeda, sidoo kale waa qaybta ugu dhibcaha hooseysa: dhexdhexaad ahaan 40 ka mid ah 100.
Tirooyinku waxay ka yimaadeen baaritaankii ugu dambeeyay ee 94,853 website oo ka jawaabay baarahayaga intii u dhaxaysay Abriil iyo Oktoobar 2026.
Immisa website ayaa dira header kasta
| Header | Websiteyada dira |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Hal header ah ma gaaro kalabar websiteyada. HSTS wuu ka maqan yahay 58.1%, taas oo macnaheedu yahay in booqashada koowaad weli loo hoos dhigi karo HTTP caadi ah. Intaas waxaa dheer, 17.7% websiteyada gabi ahaanba uma wareejiyaan HTTP xagga HTTPS.
Madalkaagu ayaa go'aamiya inta badan
| Madal | Websiteyo | Content-Security-Policy ma jiro |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| CMS lama helin | 60,583 | 77.3% |
Shopify wuxuu CSP u diraa dukaan kasta, sidaa darteed ku dhawaad ma jiro website Shopify ah oo ka maqan. WordPress iyo inta badan nidaamyada dukaamada ee aad adigu martigeliso, header-yadu waxay ku xiran yihiin martigeliyaha ama plugin, inta badan websiteyaduna weligood ma helaan. Haddii aad isticmaasho WordPress, halkan dejinta martigelintaadu way ka muhiimsan tahay theme-kaaga.
Shanta sadar ee xira inta badan godka
Header-yadani waa ammaan ku dhawaad website kasta, waxaana lagu dari karaa web server-ka, CDN sida Cloudflare ama plugin amni:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy waxay u baahan tahay taxaddar dheeraad ah, sababtoo ah siyaasad adag waxay xannibi kartaa qoraalladaada (scripts). Ku bilow Content-Security-Policy-Report-Only, eeg waxa ay xannibi lahayd, kadibna u wareeg header-ka dhabta ah marka warbixinnadu nadiif noqdaan.
Header-yada amnigu ma saameeyaan kaalinta raadinta?
Si toos ah maya. Google wuxuu xaqiijiyay HTTPS inay tahay calaamad kaalin raadin, laakiin ma xaqiijin header-yada gaarka ah. Hase yeeshee dhab ahaan way muhiim u yihiin SEO: website la jabsaday oo lagu galiyay xiriirro spam ah si degdeg ah ayuu u lumiyaa kaalintiisa, browser-yaduna waxay booqdayaasha uga digaan bogagga soo dejiya nuxur aan ammaan ahayn.
Samee baaritaan SEO oo bilaash ah si aad si sax ah u aragto header-yada uu websitekaagu diro, oo leh xal diyaar ah mid kasta oo ka maqan. Ereyada waxaa lagu sharxay SEO laga bilaabo A ilaa Z.
Habka: baaritaankii ugu dambeeyay ee dhammaystiran ee domain kasta, 94,853 website oo leh natiijo header, la ururiyay Abriil ilaa Oktoobar 2026, inta badan domainyo dhowaan la diiwaangeliyay iyo domainyada ganacsiyada yaryar ee 15 suuq oo dal. Madallada leh wax ka yar 100 website waa laga saaray, lamana sheegin wax domain gaar ah.