updated cross site scripting policy

Typo in main file, added attach policy jpg.
Merge branch 'gh-pages' of https://github.com/soacom/docs-test into gh-pages