minor changes and cleanup
add "Covert Redirect" advisory