v 13.6.15.901

x Remove "fetch" capability from DEFAULT preset unless
"script" is there too (thanks Security Research Labs for
suggestion)
x Block websocket connections where the fetch capability is
disabled (thanks Security Research Labs for report)
x Improved origin normalization for sandboxed content
(thanks Security Research Labs for report)