changed status of “Content Security Policy Level 2” from CR to PR