Improving http headers recommendations



In the spirit of improving the security headers part of the documentation, here are a few links:

I honestly have no expertise on this and it looks like we could spend a lifetime on that topic :wink: But there may be a few things we can do that would not be nitpicking ?


#2 is also pretty good.