Index: openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.adp,v
diff -u -N -r1.1 -r1.1.2.1
--- openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.adp	20 Feb 2017 09:49:14 -0000	1.1
+++ openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.adp	20 Feb 2017 21:31:42 -0000	1.1.2.1
@@ -56,7 +56,6 @@
               (Powered by Tcl<a href="http://www.tcl.tk/"><img alt="Tcl Logo" src="/resources/openacs-bootstrap3-theme/images/plume.png" width="14" height="18"></a>, 
                 Next Scripting <a href="https://next-scripting.org/"><img alt="NSF Logo" src="/resources/openacs-bootstrap3-theme/images/next-icon.png" width="14" height="8"></a>, 
                 NaviServer <%= [ns_info patchlevel] %> <a href="http://sourceforge.net/projects/naviserver/"><img src="/resources/openacs-bootstrap3-theme/images/ns-icon-16.png" alt="NaviServer Logo" width="12" height="12"></a>,
-                <a href='http://ipv6-test.com/validate.php?url=referer'><img src='http://ipv6-test.com/button-ipv6-80x15.png' alt='ipv6 ready' title='ipv6 ready' border='0' /></a>,
                 <%= [expr {[string match *.* [ns_conn peeraddr]] ? "IPv4" : "IPv6"}] %>
             </p>
         </div>
Index: openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.tcl,v
diff -u -N -r1.1 -r1.1.2.1
--- openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.tcl	20 Feb 2017 09:49:14 -0000	1.1
+++ openacs-4/packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master.tcl	20 Feb 2017 21:31:42 -0000	1.1.2.1
@@ -138,5 +138,11 @@
 # User messages
 util_get_user_messages -multirow user_messages
 
+#
+# Security setup
+#
 set csrf [security::csrf::new]
 
+security::csp::require style-src maxcdn.bootstrapcdn.com
+security::csp::require script-src maxcdn.bootstrapcdn.com
+security::csp::require font-src maxcdn.bootstrapcdn.com
Index: openacs-4/packages/dotlrn-bootstrap3-theme/tcl/apm-callback-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/dotlrn-bootstrap3-theme/tcl/apm-callback-procs.tcl,v
diff -u -N -r1.1 -r1.1.2.1
--- openacs-4/packages/dotlrn-bootstrap3-theme/tcl/apm-callback-procs.tcl	20 Feb 2017 09:49:14 -0000	1.1
+++ openacs-4/packages/dotlrn-bootstrap3-theme/tcl/apm-callback-procs.tcl	20 Feb 2017 21:31:42 -0000	1.1.2.1
@@ -96,7 +96,7 @@
             -template /packages/dotlrn-bootstrap3-theme/resources/masters/dotlrn-master \
             -css {
 {-href /resources/acs-subsite/site-master.css -media all -order 0}
-{-href //netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css -media all -order 1}
+{-href //maxcdn.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css -media all -order 1}
 {-href /resources/openacs-bootstrap3-theme/css/main.css -media all -order 2}
 {-href /resources/dotlrn-bootstrap3-theme/css/dotlrn.css -media all -order 3}
 {-href /resources/dotlrn-bootstrap3-theme/css/color/green.css -media all -order 4}
@@ -105,7 +105,7 @@
             } \
             -js {
 {-src "/resources/openacs-bootstrap3-theme/js/jquery-1.11.3.min.js" -order 1}
-{-src "//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js" -order 2}
+{-src "//maxcdn.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js" -order 2}
             } \
             -form_template standard \
             -list_template table \