Security headers nga 2026: webusaithi 3 kha 4 a dzi na Content-Security-Policy
Security headers nga 2026: webusaithi 3 kha 4 a dzi na Content-Security-Policy
Security headers ndi mitalo i si gathi kha phindulo ya seva ine ya vhudza bulausara uri i fanela u vha i songo leluwa hani na siaṱari. A zwi na mutengo u dzi rumela, dzi tsireledza vhadalari kha clickjacking, zwi re ngomu zwo ṱanganyiswaho na u dzheniswa ha zwikiripiti, nahone ndi tshipiḓa tsha mbalo ya tsireledzo kha ṱhoḓisiso iṅwe na iṅwe ya LANGR SEO. Kha data yashu, ndi dzone hafhu modulu i re na mbalo ya fhasisa: median ya 40 kha 100.
Mbalo idzi dzi bva kha ṱhoḓisiso ya u fhedzisela ya webusaithi dza 94 853 dzo fhindulaho tshisedzi tshashu vhukati ha Lambamai na Tshimedzi 2026.
Ndi saithi nngana dzi rumelaho header iṅwe na iṅwe
| Header | Saithi dzi i rumelaho |
|---|---|
| X-Content-Type-Options | 47,6% |
| X-Frame-Options | 44,8% |
| Strict-Transport-Security (HSTS) | 41,9% |
| Referrer-Policy | 25,6% |
| Content-Security-Policy | 23,5% |
| Permissions-Policy | 8,4% |
A hu na na header nthihi i swikaho hafu ya saithi. HSTS i a shaya kha 58,1%, zwine zwa amba uri u dalela ha u thoma hu kha ḓi kona u tsitselwa kha HTTP ya misi yoṱhe. Nṱhani ha izwo, 17,7% ya saithi a dzi livhisi HTTP kha HTTPS na luthihi.
Phulatifomo yaṋu i ṱalula zwinzhi
| Phulatifomo | Saithi | A hu na Content-Security-Policy |
|---|---|---|
| Shopify | 4 411 | 2,6% |
| Squarespace | 348 | 85,3% |
| WordPress | 25 703 | 83,3% |
| PrestaShop | 1 205 | 90,4% |
| OpenCart | 455 | 94,3% |
| Wix | 119 | 97,5% |
| A ho ngo wanala CMS | 60 583 | 77,3% |
Shopify i rumela CSP ya vhengele ḽiṅwe na ḽiṅwe, ngauralo hu ṱoḓa u vha hu si na saithi ya Shopify i i shayaho. Kha WordPress na sisiṱeme nnzhi dza mavhengele dzi ḓifarelaho, headers dzi ḓitika nga mufari (host) kana nga plugin, nahone saithi nnzhi a dzi vhuyi dza dzi wana. Arali ni tshi shumisa WordPress, mudzudzanyo wa hosting yaṋu u na ndeme u fhira theme yaṋu fhano.
Mitalo miṱanu i valaho tshipiḓa tshihulwane tsha khaṱhulo
Headers idzi dzo tsireledzea kha hu ṱoḓa u vha saithi iṅwe na iṅwe nahone dzi nga engedzwa kha seva ya webe, kha CDN i ngaho Cloudflare kana kha plugin ya tsireledzo:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy i ṱoḓa vhuṱhogwa ho engedzeaho, ngauri mbekanyamaitele i sa leluwi i nga thivhela zwikiripiti zwaṋu zwiṋe. Thomani nga Content-Security-Policy-Report-Only, ni sedze zwine ya nga zwi thivhela, nga murahu ni shandukele kha header ya vhukuma musi mivhigo i si na thaidzo.
Naa security headers dzi kwama vhuimo kha u ṱoḓa?
A si nga ho livhaho. Google yo khwaṱhisedza HTTPS sa tshiga tsha vhuimo, fhedzi hu si headers nga u ṱoṱhe. Naho zwo ralo dzi kha ḓi vha na ndeme kha SEO nga vhukuma: saithi yo hakiwaho i na linki dza spam dzo dzheniswaho i xelelwa nga vhuimo hayo nga u ṱavhanya, nahone dzibulausara dzi sevha vhadalari uri vha sa dzhene kha masiaṱari a ḓisaho zwi re ngomu zwi songo tsireledzeaho.
Itani ṱhoḓisiso ya SEO mahala u itela u vhona zwavhuḓi uri ndi headers dzifhio dzine saithi yaṋu ya dzi rumela, khathihi na tshilulamisi tsho lugaho tsha iṅwe na iṅwe i shayaho. Maipfi o ṱalutshedzwa kha SEO u bva kha A u swika kha Z.
Ngona: ṱhoḓisiso yo fhelelaho ya u fhedzisela ya domeini iṅwe na iṅwe, webusaithi dza 94 853 dzi na mvelelo ya headers, yo kuvhanganywa u bva Lambamai u swika Tshimedzi 2026, nga maanḓa domeini dzo ṅwaliswaho zwino na domeini dza mabindu maṱuku kha mimaraga ya mashango a 15. Phulatifomo dzi na saithi dzi si swike 100 dzo litshwa, nahone a hu na domeini na nthihi i ambiwaho nga dzina.