Header yu kaaraange ci 2026: 3 ci 4 site internet amuñu Content-Security-Policy
Header yu kaaraange ci 2026: 3 ci 4 site internet amuñu Content-Security-Policy
Header yu kaaraange (security headers) ay rëdd yu néew lañu ci tontub serveur bi, yuy wax navigateur bi naka la wara tàng ci benn xët. Yónni leen jaruñu dara, dañuy aar ñiy wëndeelu ci clickjacking, ci mixed content ak ci script yu ñu dugal, te bokk nañu ci score kaaraange ci saytu bu nekk bu LANGR SEO. Ci sunu done, ñoo nekk itam module bi gëna am score bu suufe: médiane 40 ci 100.
Lim yi dañu jóge ci saytu bu mujj bu 94.853 site internet yu tontu sunu scanner diggante awril ak oktoobar 2026.
Ñaata site ñooy yónni header bu nekk
| Header | Site yi koy yónni |
|---|---|
| X-Content-Type-Options | 47,6% |
| X-Frame-Options | 44,8% |
| Strict-Transport-Security (HSTS) | 41,9% |
| Referrer-Policy | 25,6% |
| Content-Security-Policy | 23,5% |
| Permissions-Policy | 8,4% |
Benn header sax agsiwul ci genn-wàllu site yi. HSTS amul ci 58,1%, loolu tekki na ne wëndeelu bu njëkk bi mën na ñu ko wàccee ci HTTP bu ñuul. Ci kaw loolu, 17,7% ci site yi duñu yóbbu HTTP ci HTTPS dara.
Sa plateforme moo dogal li ëpp
| Plateforme | Site yi | Amul Content-Security-Policy |
|---|---|---|
| Shopify | 4.411 | 2,6% |
| Squarespace | 348 | 85,3% |
| WordPress | 25.703 | 83,3% |
| PrestaShop | 1.205 | 90,4% |
| OpenCart | 455 | 94,3% |
| Wix | 119 | 97,5% |
| Gisunu benn CMS | 60.583 | 77,3% |
Shopify dafay yónni benn CSP ngir bitig bu nekk, moo tax lu jege benn site Shopify ñàkkul ko. Ci WordPress ak ci li ëpp ci sistem bitig yi nit ñi di hébergé seen bopp, header yi dañu aju ci hébergeur bi walla ci benn plugin, te li ëpp ci site yi duñu leen jot mukk. Boo jëfandikoo WordPress, fii configuration hébergement bi moo gëna am solo sa thème.
Juróomi rëdd yiy tëj li ëpp ci ñàkk bi
Header yii amuñu benn loraange ngir lu jege bépp site te mën nañu leen yokk ci serveur web bi, ci benn CDN bu mel ni Cloudflare walla ak benn plugin kaaraange:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy dafa laaj ñu gëna moytu, ndax politique bu dëgër mën na tëye sa script yu bopp. Tàmbalil ak Content-Security-Policy-Report-Only, xool lan la doon tëye, te jàll ci header bu dëgg bi bu rapport yi setee.
Ndax header yu kaaraange dañuy laal palaas bi ci seet yi?
Du ci yoon wu jub. Google dëggal na ne HTTPS benn màndarga palaas la, waaye dëggalul header yi kenn-kenn. Teewul ñu am solo ngir SEO ci jëf: site bu ñu hacker te dugal ci lien spam dafay ñàkk palaasam gaaw, te navigateur yi dañuy artu ñiy wëndeelu ñu sore xët yiy yeb lu amul kaaraange.
Defal saytu SEO bu amul pay ngir gis bu leer ban header la sa site di yónni, ak defar bu pare ngir bu nekk bu ñàkk. Baat yi, ñu ngi leen leeral ci SEO li dale ci A ba Z.
Pexe: saytu bu mat bu mujj ci domaine bu nekk, 94.853 site internet yu am njeexitalu header, nu dajale leen li dale ci awril ba oktoobar 2026, li ëpp ci ñoom ay domaine yu ñu bindu bees ak domaine yu liggéey yu ndaw ci 15 marse yu réew. Plateforme yu am lu néew 100 site, nu bàyyi nañu leen, te tuddunu turu benn domaine.