public marks

PUBLIC MARKS from dzc with tags "Content Security Policy" & "injection JS"