public marks

PUBLIC MARKS from dzc with tags security & "cross site scripting"