Recommended WordPress security headers

#1
Are there recommended (for a typical site) security header configuration values somewhere in the documentation (or personal recommendation as well)?
 
Top