Ii-header zokhuseleko ngo-2026: iiwebhusayithi ezi-3 kwezi-4 azinayo i-Content-Security-Policy
Ii-header zokhuseleko ngo-2026: iiwebhusayithi ezi-3 kwezi-4 azinayo i-Content-Security-Policy
Ii-header zokhuseleko yimigca embalwa kwimpendulo yeseva exelela ibhrawuza ukuba ingqongqo kangakanani kwiphepha. Azibizi nto ukuzithumela, zikhusela iindwendwe kwi-clickjacking, kumxholo oxubeneyo nakufakwa kwee-script, kwaye ziyinxalenye yamanqaku okhuseleko kulo lonke uphicotho lwe-LANGR SEO. Kwidatha yethu zikwayimodyuli enamanqaku asezantsi kakhulu: inqaku eliphakathi lingama-40 kwali-100.
La manani avela kuphicotho lwamva nje lweewebhusayithi ezingama-94 853 eziphendule iskena sethu phakathi kuka-Epreli no-Okthobha 2026.
Zingaphi iisayithi ezithumela i-header nganye
| Header | Iisayithi ezithumelayo |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Akukho nanye i-header efikelela kwisiqingatha seesayithi. I-HSTS ayikho kwi-58.1%, nto leyo ethetha ukuba utyelelo lokuqala lusenokwehliselwa kwi-HTTP eqhelekileyo. Ngaphezu koko, i-17.7% yeesayithi ayiyithumeli kwakhona kwaphela i-HTTP ku-HTTPS.
Iqonga lakho ligqiba uninzi lwazo
| Iqonga | Iisayithi | Akukho Content-Security-Policy |
|---|---|---|
| Shopify | 4 411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25 703 | 83.3% |
| PrestaShop | 1 205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Akukho CMS ifunyenweyo | 60 583 | 77.3% |
I-Shopify ithumela i-CSP kuyo yonke ivenkile, ngoko phantse akukho sayithi ye-Shopify engenayo. Kwi-WordPress nakwiinkqubo ezininzi zeevenkile ezizibambelayo, ii-header zixhomekeke kumbambi wesayithi okanye kwi-plugin, kwaye uninzi lweesayithi aluze luzifumane. Ukuba usebenzisa i-WordPress, ulungiselelo lwakho lokubamba lubaluleke ngakumbi apha kune-theme yakho.
Imigca emihlanu evala uninzi lwesikhewu
Ezi header zikhuselekile phantse kuyo nayiphi na isayithi kwaye zinokongezwa kwiseva yewebhu, kwi-CDN efana ne-Cloudflare okanye kwi-plugin yokhuseleko:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()I-Content-Security-Policy ifuna ukulumka ngakumbi, kuba ipolisi engqongqo inokuthintela kwanee-script zakho. Qala nge-Content-Security-Policy-Report-Only, ujonge ukuba ingathintela ntoni, uze utshintshele kwi-header yokwenyani xa iingxelo zicocekile.
Ingaba ii-header zokhuseleko zichaphazela ukubekwa kwiziphumo zokukhangela?
Hayi ngokuthe ngqo. U-Google uqinisekisile i-HTTPS njengomqondiso wokubeka, kodwa hayi ii-header nganye nganye. Nangona kunjalo, zibalulekile kwi-SEO ekusebenzeni: isayithi ehakiweyo efakwe amakhonkco e-spam ilahlekelwa zizikhundla ngokukhawuleza, kwaye iibhrawuza zilumkisa iindwendwe ukuba zingangeni kumaphepha alayisha umxholo ongakhuselekanga.
Yenza uphicotho lwe-SEO simahla ukuze ubone ngqo ukuba zeziphi ii-header ezithunyelwa yisayithi yakho, kunye nesisombululo esilungileyo kuleyo nganye engekhoyo. Amagama acaciswe kwi-SEO ukusuka ku-A ukuya ku-Z.
Indlela: uphicotho olupheleleyo lwamva nje ngedomeyini nganye, iiwebhusayithi ezingama-94 853 ezinesiphumo see-header, eziqokelelwe ukusuka ku-Epreli ukuya ku-Okthobha 2026, ikakhulu iidomeyini ezisandula ukubhaliswa nezamashishini amancinci kwiimarike zamazwe ali-15. Amaqonga aneesayithi ezingaphantsi kwe-100 akafakwanga, kwaye akukho domeyini ithile ichazwe ngegama.