Five Security Headers Worth Shipping This Week
Four of these are one line each and cannot break anything. The fifth is Content Security Policy, which can absolutely break things, so it gets a rollout plan instead of a copy-paste. Plus the header everyone still ships that browsers stopped reading years ago.