making changes to block mixed active and passive content based on domain
adding logic to detect insecure passwords based on domain type