feat: JavaScript API CORS and CSP related vulnerability fixes (option A)

[taneltm]

• API changes
  • Fixes CORS and CSP related issues
  • Adjustments related to NativeApp version 2.0.0 API changes
• Refactored models, message models are now shared with the WebExtension project
• Removed HTTP request related Error classes
• Removed configuration option DEFAULT_SERVER_REQUEST_TIMEOUT
• Updated Tests
• Fixed an issue where the bundled js file would have multiple copyright comments
• Added ESLint rule for import ordering and reordered imports
• Removed unnecessary logging
• Some README.md changes, more to come later

[lgtm-com[bot]]

This pull request introduces 1 alert when merging b6bb98571fbb3ea7281349fb730eef104fa56c1d into cb35bcc5bb4d67df1511433248d5b6d9a7eacff3 - view on LGTM.com

new alerts:

• 1 for Cross-window communication with unrestricted target origin

[lgtm-com[bot]]

This pull request introduces 1 alert when merging 2fded1d3309768cb8a6618403fcd1f3b8acfac16 into dc53426994184a4ee426d146ea3588ec5731cb3e - view on LGTM.com

new alerts:

• 1 for Cross-window communication with unrestricted target origin