web/security: update for 2.3, 1.0.10, 0.5.*