Added two new levels, one with simple XSS filtering (replacexss) and one that uses a Content Security Policy (CSP).