Changed policy to read only and removed html tags from body.jsp