{"id":53,"date":"2026-09-02T16:07:30","date_gmt":"2026-09-02T07:07:30","guid":{"rendered":"https:\/\/motoki-design.co.jp\/tools\/security-headers\/"},"modified":"2026-09-02T18:50:14","modified_gmt":"2026-09-02T09:50:14","slug":"security-headers","status":"publish","type":"page","link":"https:\/\/motoki-design.co.jp\/tools\/security-headers\/","title":{"rendered":"\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc\u8a3a\u65ad\u30c4\u30fc\u30eb"},"content":{"rendered":"\n<div id=\"wt-sechead\" class=\"wt-tool\">\n\t<style>\n\t\t#wt-sechead .wt-code{position:relative;background:#1c2430;color:#e6edf3;border-radius:10px;padding:1em 1.1em;overflow-x:auto;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:.82em;line-height:1.7;white-space:pre;margin:0}\n\t\t#wt-sechead .wt-copy{position:absolute;top:.6em;right:.6em;padding:.35em .9em;font-size:.85em;border:0;border-radius:6px;background:#39445266;color:#fff;cursor:pointer}\n\t\t#wt-sechead .wt-copy:hover{background:#394452}\n\t<\/style>\n\n\t<p class=\"wt-lead\">URL\u3092\u5165\u308c\u308b\u3060\u3051\u3067\u3001<strong>HTTP\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc\u306e\u8a2d\u5b9a\u72b6\u6cc1\u3092100\u70b9\u6e80\u70b9\u3067\u63a1\u70b9<\/strong>\u3057\u307e\u3059\u3002\u30af\u30ea\u30c3\u30af\u30b8\u30e3\u30c3\u30ad\u30f3\u30b0\u3084\u4e2d\u9593\u8005\u653b\u6483\u3078\u306e\u5099\u3048\u304c\u3067\u304d\u3066\u3044\u308b\u304b\u304c\u5206\u304b\u308a\u3001<strong>\u4e0d\u8db3\u5206\u306f\u305d\u306e\u307e\u307e\u8cbc\u308c\u308b .htaccess \u306e\u8a2d\u5b9a\u4f8b<\/strong>\u3092\u51fa\u529b\u3057\u307e\u3059\u3002<\/p>\n\n\t<form class=\"wt-form\">\n\t\t<div class=\"wt-row\">\n\t\t\t<input class=\"wt-input\" type=\"text\" placeholder=\"example.co.jp \u307e\u305f\u306f https:\/\/example.co.jp\/\" autocomplete=\"off\" autocapitalize=\"off\" spellcheck=\"false\" inputmode=\"url\" aria-label=\"\u8abf\u3079\u305f\u3044URL\">\n\t\t\t<button class=\"wt-btn\" type=\"submit\">\u8a3a\u65ad\u3059\u308b<\/button>\n\t\t<\/div>\n\t\t<p class=\"wt-samples\">\u304a\u8a66\u3057:\n\t\t\t<button type=\"button\" data-sample=\"github.com\">github.com<\/button>\u30fb\n\t\t\t<button type=\"button\" data-sample=\"wordpress.org\">wordpress.org<\/button>\n\t\t<\/p>\n\t\t<p class=\"wt-privacy-note\">\u4f1a\u54e1\u767b\u9332\u30fb\u30ed\u30b0\u30a4\u30f3\u4e0d\u8981\uff0f<strong>\u8abf\u3079\u305fURL\u306f\u4fdd\u5b58\u30fb\u516c\u958b\u3057\u307e\u305b\u3093<\/strong><\/p>\n\t<\/form>\n\n\t<div class=\"wt-status\" hidden><\/div>\n\t<div class=\"wt-result\" hidden><\/div>\n\n\t<div class=\"wt-disclaimer\">\n\t\t<strong>\u8a3a\u65ad\u306e\u4ed5\u7d44\u307f\u306b\u3064\u3044\u3066<\/strong><br>\n\t\t\u30da\u30fc\u30b8\u306b1\u56de\u30a2\u30af\u30bb\u30b9\u3057\u3001\u8fd4\u3063\u3066\u304d\u305fHTTP\u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0\u30fc\u3092\u78ba\u8a8d\u3057\u3066\u3044\u308b\u3060\u3051\u3067\u3059\u3002\u653b\u6483\u3092\u8a66\u307f\u308b\u3088\u3046\u306a\u3053\u3068\u306f\u4e00\u5207\u3057\u307e\u305b\u3093\u3002\u30d8\u30c3\u30c0\u30fc\u306e\u8a2d\u5b9a\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u306e\u4e00\u90e8\u5206\u3067\u3042\u308a\u3001\u3053\u308c\u304c\u6e80\u70b9\u3067\u3082\u30b5\u30a4\u30c8\u304c\u5b89\u5168\u3067\u3042\u308b\u3053\u3068\u3092\u4fdd\u8a3c\u3059\u308b\u3082\u306e\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3084\u30d1\u30b9\u30ef\u30fc\u30c9\u7ba1\u7406\u306a\u3069\u3001\u4ed6\u306e\u5bfe\u7b56\u3068\u3042\u308f\u305b\u3066\u3054\u691c\u8a0e\u304f\u3060\u3055\u3044\u3002\n\t<\/div>\n\n\t<div class=\"wt-faq\">\n\t\t<details>\n\t\t\t<summary>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc\u306f\u8a2d\u5b9a\u3057\u306a\u3044\u3068\u5371\u967a\u3067\u3059\u304b\uff1f<\/summary>\n\t\t\t<p>\u300c\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u3068\u5373\u5ea7\u306b\u4fb5\u5165\u3055\u308c\u308b\u300d\u3068\u3044\u3046\u3082\u306e\u3067\u306f\u306a\u304f\u3001<strong>\u4e07\u4e00\u306e\u653b\u6483\u306e\u88ab\u5bb3\u3092\u5c0f\u3055\u304f\u3059\u308b\u4fdd\u967a<\/strong>\u3067\u3059\u3002\u305f\u3068\u3048\u3070X-Frame-Options\u3092\u8a2d\u5b9a\u3057\u3066\u304a\u304f\u3068\u3001\u81ea\u793e\u30b5\u30a4\u30c8\u3092\u900f\u660e\u306aiframe\u3067\u91cd\u306d\u3066\u30af\u30ea\u30c3\u30af\u3092\u9a19\u3057\u53d6\u308b\u653b\u6483\u3092\u9632\u3052\u307e\u3059\u3002\u8a2d\u5b9a\u81ea\u4f53\u306f .htaccess \u306b\u6570\u884c\u8db3\u3059\u3060\u3051\u3067\u3001\u8cbb\u7528\u3082\u304b\u304b\u308a\u307e\u305b\u3093\u3002\u4f01\u696d\u30b5\u30a4\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8a3a\u65ad\u3067\u6307\u6458\u3055\u308c\u308b\u5b9a\u756a\u9805\u76ee\u3067\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n\t\t<\/details>\n\t\t<details>\n\t\t\t<summary>.htaccess \u306b\u8cbc\u308b\u3060\u3051\u3067\u5927\u4e08\u592b\u3067\u3059\u304b\uff1f<\/summary>\n\t\t\t<p>HSTS\u30fbX-Frame-Options\u30fbX-Content-Type-Options\u30fbReferrer-Policy\u30fbPermissions-Policy \u306f\u305d\u306e\u307e\u307e\u8cbc\u3063\u3066\u554f\u984c\u306b\u306a\u308b\u3053\u3068\u306f\u307b\u3068\u3093\u3069\u3042\u308a\u307e\u305b\u3093\u3002<strong>CSP\uff08Content-Security-Policy\uff09\u3060\u3051\u306f\u6ce8\u610f<\/strong>\u304c\u5fc5\u8981\u3067\u3059\u3002\u5916\u90e8\u306e\u5e83\u544a\u30fb\u89e3\u6790\u30bf\u30b0\u30fb\u57cb\u3081\u8fbc\u307f\u52d5\u753b\u306a\u3069\u3092\u30d6\u30ed\u30c3\u30af\u3057\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u307e\u305a <code>Content-Security-Policy-Report-Only<\/code> \u3067\u69d8\u5b50\u3092\u898b\u3066\u304b\u3089\u672c\u9069\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u307e\u305f\u3001\u8cbc\u3063\u305f\u3042\u3068\u306f\u5fc5\u305a\u30b5\u30a4\u30c8\u306e\u8868\u793a\u3068\u554f\u3044\u5408\u308f\u305b\u30d5\u30a9\u30fc\u30e0\u306e\u52d5\u4f5c\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\t\t<\/details>\n\t\t<details>\n\t\t\t<summary>HSTS\u3092\u8a2d\u5b9a\u3059\u308b\u3068\u5143\u306b\u623b\u305b\u306a\u3044\u3068\u805e\u304d\u307e\u3057\u305f<\/summary>\n\t\t\t<p>\u305d\u306e\u3068\u304a\u308a\u3067\u3059\u3002HSTS\u306f\u30d6\u30e9\u30a6\u30b6\u306b\u300c\u3053\u306e\u30c9\u30e1\u30a4\u30f3\u306f\u4eca\u5f8c max-age \u79d2\u306e\u3042\u3044\u3060\u5fc5\u305aHTTPS\u3067\u63a5\u7d9a\u3059\u308b\u300d\u3068\u8a18\u61b6\u3055\u305b\u308b\u4ed5\u7d44\u307f\u306a\u306e\u3067\u3001\u8a2d\u5b9a\u5f8c\u306bHTTPS\u5316\u3092\u3084\u3081\u308b\u3068\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3059\u3002<strong>\u5e38\u6642SSL\u5316\u304c\u5b8c\u5168\u306b\u6e08\u3093\u3067\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089<\/strong>\u8a2d\u5b9a\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u4e0d\u5b89\u306a\u5834\u5408\u306f max-age \u3092\u77ed\u3081\uff08\u4f8b: 300\uff09\u3067\u8a66\u3057\u3001\u554f\u984c\u306a\u3051\u308c\u30701\u5e74\uff0831536000\uff09\u306b\u4f38\u3070\u3059\u306e\u304c\u5b89\u5168\u3067\u3059\u3002<\/p>\n\t\t<\/details>\n\t<\/div>\n<\/div>\n\n<div class=\"wt-tool\"><div class=\"wt-policy\"><p class=\"wt-policy-title\">\ud83d\udd12 \u8abf\u3079\u305f\u5185\u5bb9\u306f\u8a18\u9332\u30fb\u516c\u958b\u3057\u307e\u305b\u3093<\/p><ul><li><strong>\u691c\u7d22\u3057\u305f\u5185\u5bb9\u3092\u4fdd\u5b58\u30fb\u4e00\u89a7\u5316\u30fb\u516c\u958b\u3057\u307e\u305b\u3093\u3002<\/strong>\u8abf\u67fb\u7d50\u679c\u3092\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u5316\u3057\u3066\u691c\u7d22\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u305f\u308a\u3001\u4ed6\u306e\u5229\u7528\u8005\u306b\u898b\u305b\u305f\u308a\u3059\u308b\u3053\u3068\u306f\u4e00\u5207\u3042\u308a\u307e\u305b\u3093\u3002<\/li><li><strong>\u691c\u7d22\u5c65\u6b74\u3092\u6b8b\u3057\u307e\u305b\u3093\u3002<\/strong>\u8ab0\u304c\u4f55\u3092\u8abf\u3079\u305f\u304b\u3092\u7d10\u3065\u3051\u3066\u84c4\u7a4d\u3059\u308b\u3053\u3068\u306f\u3057\u307e\u305b\u3093\u3002\u4f1a\u54e1\u767b\u9332\u30fb\u30ed\u30b0\u30a4\u30f3\u3082\u4e0d\u8981\u3067\u3059\u3002<\/li><li><strong>\u7b2c\u4e09\u8005\u306b\u63d0\u4f9b\u30fb\u8ca9\u58f2\u3057\u307e\u305b\u3093\u3002<\/strong>\u55b6\u696d\u30ea\u30b9\u30c8\u3084\u5e83\u544a\u76ee\u7684\u3067\u306e\u5229\u7528\u3082\u3042\u308a\u307e\u305b\u3093\u3002<\/li><li>\u30b5\u30fc\u30d0\u30fc\u8ca0\u8377\u3092\u6291\u3048\u308b\u305f\u3081\u3001<strong>\u5224\u5b9a\u7d50\u679c\u306e\u307f\u6700\u59271\u6642\u9593\u306e\u4e00\u6642\u30ad\u30e3\u30c3\u30b7\u30e5<\/strong>\u306b\u4fdd\u6301\u3057\u3001\u6642\u9593\u306e\u7d4c\u904e\u3067\u81ea\u52d5\u7684\u306b\u6d88\u3048\u307e\u3059\u3002\u9023\u7d9a\u30a2\u30af\u30bb\u30b9\u306e\u5236\u9650\u7528\u306bIP\u30a2\u30c9\u30ec\u30b9\u3092<strong>\u30cf\u30c3\u30b7\u30e5\u5316\u3057\u305f\u5024<\/strong>\u3092\u6700\u592710\u5206\u9593\u3060\u3051\u4fdd\u6301\u3057\u307e\u3059\uff08\u5143\u306eIP\u30a2\u30c9\u30ec\u30b9\u306f\u4fdd\u5b58\u3057\u307e\u305b\u3093\uff09\u3002<\/li><li>\u8abf\u3079\u305f\u5bfe\u8c61\u306f\u5171\u6709\u7528\u306bURL\u306e<code>#<\/code>\u4ee5\u964d\u306b\u4ed8\u304d\u307e\u3059\u304c\u3001\u3053\u306e\u90e8\u5206\u306f\u30b5\u30fc\u30d0\u30fc\u306b\u3082\u30a2\u30af\u30bb\u30b9\u89e3\u6790\u306b\u3082\u9001\u4fe1\u3055\u308c\u307e\u305b\u3093\u3002<\/li><\/ul><\/div><\/div>\n\n<script>\nWT.bind({\n\troot: 'wt-sechead',\n\tapi: '\/tools\/wp-json\/webtools\/v1\/security-headers',\n\tparam: 'url',\n\trender: function (d, W) {\n\t\tif (d.verdict && !d.score) {\n\t\t\treturn W.head('ng', d.unicode || d.domain, W.esc(d.verdict.title), [d.verdict.message]);\n\t\t}\n\n\t\tvar s = d.score || {};\n\t\tvar status = s.score >= 75 ? 'ok' : (s.score >= 55 ? 'warn' : 'ng');\n\t\tvar html = W.headGrade(status, (d.unicode || d.domain) + ' \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc', s.grade, s.class, s.score, s.label);\n\n\t\thtml += '<h3 class=\"wt-h\">\u9805\u76ee\u3054\u3068\u306e\u7d50\u679c<\/h3>';\n\t\thtml += W.checks(d.checks || []);\n\n\t\tif (d.disclosure && d.disclosure.length) {\n\t\t\thtml += '<h3 class=\"wt-h\">\u60c5\u5831\u306e\u516c\u958b\u72b6\u6cc1<\/h3>';\n\t\t\thtml += W.checks(d.disclosure);\n\t\t}\n\n\t\tif (d.htaccess) {\n\t\t\thtml += '<h3 class=\"wt-h\">\u4e0d\u8db3\u5206\u306e\u8a2d\u5b9a\u4f8b\uff08.htaccess\uff09<\/h3>';\n\t\t\thtml += '<p class=\"wt-note\" style=\"margin-bottom:.7em\">\u30b5\u30a4\u30c8\u306e\u30eb\u30fc\u30c8\u306b\u3042\u308b .htaccess \u306e\u672b\u5c3e\u306b\u8ffd\u8a18\u3057\u3066\u304f\u3060\u3055\u3044\u3002Nginx\u3092\u304a\u4f7f\u3044\u306e\u5834\u5408\u306f\u66f8\u304d\u65b9\u304c\u7570\u306a\u308a\u307e\u3059\u3002CSP\u306f\u74b0\u5883\u306b\u3088\u3063\u3066\u8868\u793a\u306b\u5f71\u97ff\u3059\u308b\u305f\u3081\u3001\u5fc5\u305a\u9069\u7528\u5f8c\u306b\u52d5\u4f5c\u78ba\u8a8d\u3092\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>';\n\t\t\thtml += '<pre class=\"wt-code\" id=\"wt-htaccess\"><button class=\"wt-copy\" type=\"button\" onclick=\"(function(b){navigator.clipboard.writeText(document.getElementById(\\'wt-htaccess\\').textContent.replace(\/^\u30b3\u30d4\u30fc|^\u30b3\u30d4\u30fc\u3057\u307e\u3057\u305f\/,\\'\\').trim()).then(function(){b.textContent=\\'\u30b3\u30d4\u30fc\u3057\u307e\u3057\u305f\\';setTimeout(function(){b.textContent=\\'\u30b3\u30d4\u30fc\\'},1500)})})(this)\">\u30b3\u30d4\u30fc<\/button>' + W.esc(d.htaccess) + '<\/pre>';\n\t\t}\n\n\t\tif (d.headers) {\n\t\t\tvar keys = Object.keys(d.headers).sort();\n\t\t\tif (keys.length) {\n\t\t\t\thtml += '<h3 class=\"wt-h\">\u53d7\u4fe1\u3057\u305f\u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0\u30fc<\/h3>';\n\t\t\t\thtml += W.rows(keys.map(function (k) {\n\t\t\t\t\treturn [k, '<span class=\"wt-mono\">' + W.esc(d.headers[k]) + '<\/span>'];\n\t\t\t\t}));\n\t\t\t}\n\t\t}\n\n\t\thtml += W.footer(d, [['ssl-check', '\u3053\u306e\u30c9\u30e1\u30a4\u30f3\u306eSSL\u8a3c\u660e\u66f8\u3092\u8abf\u3079\u308b']]);\n\t\treturn html;\n\t}\n});\n<\/script>\n\n","protected":false},"excerpt":{"rendered":"<p>URL\u3092\u5165\u308c\u308b\u3060\u3051\u3067\u3001HTTP\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc\u306e\u8a2d\u5b9a\u72b6\u6cc1\u3092100\u70b9\u6e80\u70b9\u3067\u63a1\u70b9\u3057\u307e\u3059\u3002\u30af\u30ea\u30c3\u30af\u30b8\u30e3\u30c3\u30ad\u30f3\u30b0\u3084\u4e2d\u9593\u8005\u653b\u6483\u3078\u306e\u5099\u3048\u304c\u3067\u304d\u3066\u3044\u308b\u304b\u304c\u5206\u304b\u308a\u3001\u4e0d\u8db3\u5206\u306f\u305d\u306e\u307e\u307e\u8cbc\u308c\u308b .htaccess \u306e\u8a2d\u5b9a\u4f8b\u3092\u51fa\u529b\u3057\u307e\u3059\u3002  [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"swell_btn_cv_data":"","ssp_meta_description":"URL\u3092\u5165\u308c\u308b\u3060\u3051\u3067\u3001HSTS\u30fbCSP\u30fbX-Frame-Options\u306a\u3069\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc\u3092100\u70b9\u6e80\u70b9\u3067\u63a1\u70b9\u3002\u4e0d\u8db3\u3057\u3066\u3044\u308b\u8a2d\u5b9a\u306f\u3001\u305d\u306e\u307e\u307e\u8cbc\u308c\u308b .htaccess \u306e\u8a18\u8ff0\u4f8b\u3092\u51fa\u529b\u3057\u307e\u3059\u3002\u4f01\u696d\u30b5\u30a4\u30c8\u306e\u8106\u5f31\u6027\u8a3a\u65ad\u5bfe\u7b56\u306b\u3082\u3002\u4f1a\u54e1\u767b\u9332\u4e0d\u8981\u3002","ssp_meta_title":"\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d8\u30c3\u30c0\u30fc\u8a3a\u65ad\uff5c.htaccess\u8a2d\u5b9a\u4f8b\u3064\u304d\u3067\u7121\u6599\u63a1\u70b9","ssp_meta_robots":"","ssp_meta_canonical":"","ssp_meta_image":"","ssp_meta_keyword":"","footnotes":""},"class_list":["post-53","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/pages\/53","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/comments?post=53"}],"version-history":[{"count":1,"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/pages\/53\/revisions"}],"predecessor-version":[{"id":67,"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/pages\/53\/revisions\/67"}],"wp:attachment":[{"href":"https:\/\/motoki-design.co.jp\/tools\/wp-json\/wp\/v2\/media?parent=53"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}