We're currently getting a E grade rating from securityheaders.com - we should probably fix this by sending some of these headers.

I believe MediaWiki has config variables for some of the things we're missing but I'm not sure what they are.