Imitwe y'umutekano (security headers) mu 2026: imbuga 3 kuri 4 nta Content-Security-Policy zifite
Imitwe y'umutekano (security headers) mu 2026: imbuga 3 kuri 4 nta Content-Security-Policy zifite
Imitwe y'umutekano ni imirongo mike iri mu gisubizo cya seriveri ibwira mushakisha (browser) uko igomba kwitwararika ku rupapuro. Kuyohereza nta kiguzi bisaba, irinda abasura clickjacking, ibikubiyemo bivanze no kwinjizwamo za script, kandi ni igice cy'amanota y'umutekano muri buri suzuma rya LANGR SEO. Mu makuru yacu, ni na cyo gice gifite amanota make kurusha ibindi: amanota yo hagati ya 40 kuri 100.
Imibare iva mu isuzuma riheruka ry'imbuga 94.853 zasubije scanner yacu hagati ya Mata na Ukwakira 2026.
Imbuga zingahe zohereza buri mutwe
| Umutwe | Imbuga ziwohereza |
|---|---|
| X-Content-Type-Options | 47,6% |
| X-Frame-Options | 44,8% |
| Strict-Transport-Security (HSTS) | 41,9% |
| Referrer-Policy | 25,6% |
| Content-Security-Policy | 23,5% |
| Permissions-Policy | 8,4% |
Nta mutwe n'umwe ugera ku kimwe cya kabiri cy'imbuga. HSTS ibura kuri 58,1%, bisobanura ko gusura bwa mbere bishobora kugabanywa bikajya kuri HTTP isanzwe. Byongeye kandi, 17,7% by'imbuga ntizohereza HTTP kuri HTTPS na gato.
Sisitemu ukoresha ni yo igena byinshi
| Urubuga | Imbuga | Nta Content-Security-Policy |
|---|---|---|
| Shopify | 4.411 | 2,6% |
| Squarespace | 348 | 85,3% |
| WordPress | 25.703 | 83,3% |
| PrestaShop | 1.205 | 90,4% |
| OpenCart | 455 | 94,3% |
| Wix | 119 | 97,5% |
| Nta CMS yabonetse | 60.583 | 77,3% |
Shopify yohereza CSP kuri buri iduka, bityo hafi nta rubuga rwa Shopify ruyibura. Kuri WordPress no kuri sisitemu nyinshi z'amaduka zicumbikiwe na ba nyirazo, imitwe iterwa n'ubucumbikire cyangwa na plugin, kandi imbuga nyinshi ntizigera ziyibona. Niba ukoresha WordPress, hano igenamiterere ry'ubucumbikire bwawe rifite akamaro kurusha insanganyamatsiko (theme) yawe.
Imirongo itanu ifunga igice kinini cy'icyuho
Iyi mitwe ifite umutekano ku mbuga hafi ya zose kandi ishobora kongerwa muri seriveri y'urubuga, muri CDN nka Cloudflare cyangwa muri plugin y'umutekano:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()Content-Security-Policy isaba kwitonda kurushaho, kuko politiki ikaze ishobora guhagarika za script zawe bwite. Tangira na Content-Security-Policy-Report-Only, urebe ibyo yahagarika, hanyuma uhindukire ku mutwe nyawo iyo raporo zisukuye.
Ese imitwe y'umutekano igira ingaruka ku myanya mu ishakisha?
Si mu buryo butaziguye. Google yemeje HTTPS nk'ikimenyetso cy'imyanya, ariko si imitwe umwe umwe. Nyamara mu bikorwa ifite akamaro kuri SEO: urubuga rwinjiriwe rukinjizwamo imirongo ya spam rutakaza imyanya vuba, kandi mushakisha ziburira abasura kwirinda impapuro zipakira ibikubiyemo bidafite umutekano.
Kora isuzuma rya SEO ku buntu urebe neza imitwe urubuga rwawe rwohereza, hamwe n'igisubizo giteguye kuri buri mutwe ubura. Amagambo asobanurwa muri SEO kuva kuri A kugeza kuri Z.
Uburyo: isuzuma ryuzuye riheruka kuri buri domeni, imbuga 94.853 zifite igisubizo cy'imitwe, byakusanyijwe kuva muri Mata kugeza mu Ukwakira 2026, ahanini domeni zanditswe vuba n'iz'ubucuruzi buto mu masoko y'ibihugu 15. Sisitemu zifite imbuga ziri munsi ya 100 ntizashyizwemo, kandi nta domeni n'imwe ivugwa mu izina.