Ama-header okuphepha ngo-2026: amawebhusayithi angu-3 kwangu-4 awanayo i-Content-Security-Policy
Ama-header okuphepha ngo-2026: amawebhusayithi angu-3 kwangu-4 awanayo i-Content-Security-Policy
Ama-header okuphepha yimigqa embalwa empendulweni yeseva etshela isiphequluli ukuthi kufanele siqine kangakanani ngekhasi. Akubizi lutho ukuwathumela, avikela izivakashi ku-clickjacking, okuqukethwe okuxubile nokufakwa kwemibhalo (script injection), futhi ayingxenye yamaphuzu okuphepha kukho konke ukuhlolwa kwe-LANGR SEO. Edatheni yethu, futhi ayimojula enamaphuzu aphansi kakhulu: isilinganiso esiphakathi esingu-40 kwayi-100.
Izibalo zivela ekuhlolweni kwakamuva kwamawebhusayithi angu-94,853 aphendula iskena sethu phakathi kuka-Ephreli no-Okthoba 2026.
Mangaki amasayithi athumela i-header ngayinye
| I-header | Amasayithi ayithumelayo |
|---|---|
| X-Content-Type-Options | 47.6% |
| X-Frame-Options | 44.8% |
| Strict-Transport-Security (HSTS) | 41.9% |
| Referrer-Policy | 25.6% |
| Content-Security-Policy | 23.5% |
| Permissions-Policy | 8.4% |
Ayikho ngisho neyodwa i-header efinyelela engxenyeni yamasayithi. I-HSTS ayikho ku-58.1%, okusho ukuthi ukuvakasha kokuqala kungase kwehliselwe ku-HTTP evamile. Ngaphezu kwalokho, u-17.7% wamasayithi awayidlulisi nhlobo i-HTTP ku-HTTPS.
Ipulatifomu yakho inquma okuningi
| Ipulatifomu | Amasayithi | Ayikho i-Content-Security-Policy |
|---|---|---|
| Shopify | 4,411 | 2.6% |
| Squarespace | 348 | 85.3% |
| WordPress | 25,703 | 83.3% |
| PrestaShop | 1,205 | 90.4% |
| OpenCart | 455 | 94.3% |
| Wix | 119 | 97.5% |
| Ayikho i-CMS etholakele | 60,583 | 77.3% |
I-Shopify ithumela i-CSP yesitolo ngasinye, ngakho cishe alikho isayithi le-Shopify elingenayo. Ku-WordPress nakumasistimu amaningi ezitolo aphethwe ngabanikazi bawo, ama-header ancike kumhlinzeki wokusingathwa noma ku-plugin, futhi iningi lamasayithi alikaze liwathole. Uma usebenzisa i-WordPress, lapha ukusetha kokusingathwa kwakho kubaluleke ngaphezu kwetimu yakho.
Imigqa emihlanu evala iningi lesikhala
Lawa ma-header aphephile cishe kunoma yiliphi isayithi futhi angengezwa kuseva yewebhu, ku-CDN efana ne-Cloudflare noma ku-plugin yokuphepha:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()I-Content-Security-Policy idinga ukuqaphela okwengeziwe, ngoba inqubomgomo eqinile ingavimba imibhalo yakho uqobo. Qala nge-Content-Security-Policy-Report-Only, ubheke ukuthi ibingavimba ini, bese ushintshela ku-header yangempela lapho imibiko ihlanzekile.
Ingabe ama-header okuphepha athinta amazinga okusesha?
Hhayi ngqo. I-Google iqinisekisile i-HTTPS njengophawu lwamazinga, kodwa hhayi ama-header ngamanye. Nokho, ngokwenzeka ayabaluleka ku-SEO: isayithi eligqekeziwe elinezixhumanisi ze-spam ezifakiwe lilahlekelwa amazinga ngokushesha, futhi iziphequluli zixwayisa izivakashi ukuthi zigweme amakhasi alayisha okuqukethwe okungaphephile.
Yenza ukuhlolwa kwe-SEO mahhala ukuze ubone kahle ukuthi yimaphi ama-header athunyelwa yisayithi lakho, nesixazululo esilungile se-header ngayinye engekho. Amagama achazwe ku-SEO kusuka ku-A kuya ku-Z.
Indlela: ukuhlolwa okuphelele kwakamuva kwedomeni ngayinye, amawebhusayithi angu-94,853 anomphumela wama-header, aqoqwe kusukela ngo-Ephreli kuya ku-Okthoba 2026, ikakhulukazi amadomeni asanda kubhaliswa namadomeni amabhizinisi amancane ezimakethe zamazwe angu-15. Amapulatifomu anamasayithi angaphansi kwayi-100 akufakiwe, futhi ayikho idomeni eyodwa eshiwo ngegama.