a plone stie policy for owasp project