Sync'ed with Master

Sync'ed with Master branch.
Added CSP checks

Added CSP checks for unsafe implementations.
Changed severity

Changed the severity to low
Added surfa

Added surfa plugin
Cosmetic changes

Changed the name to surfa in the top comment.
Cosmetic changes

Needed to update the name from heada to surfa in a few places.
Fixed code

Accidentally had updateParameter in csrfTest1. Changed it to
removeParameter
Changed check metrics and updateParameters()

Instead of hashing the body and comparing, I now compare the status
codes and content-length.

I figured out how to use updateParameters() and have changed the code to
use that instead of remove/addParameters()
Changes

Changes