typos, clarify JSFlow and third-party mashups using XHR, and SME-declassification