Null questions

Null answers

• HTML form with no action (+ CSP rule no inline javascript)
• Is there a limit to how many domains we should "dns-prefetch preconnect" with Chrome?
• Service worker and CSP configuration change
• OpenGraph prefix in header necessary?
• For which Content-Types should I set security related HTTP response headers?
• How to make background-image accessible?