The nginx security headers checklist (2026), and how to verify them

Most nginx configs are one add_header away from leaking more than they should. Here's a 2026...