[css-cascade-6] Split privacy and security into distinct sections

Author: mirisuzanne

css-cascade-6/Overview.bs

@@ -886,17 +886,20 @@ Additions Since Level 2</h3>
 	and Boris Zbarsky
 	contributed to this specification.
 
-<h2 class=no-num id=priv-sec>
-Privacy and Security Considerations</h2>
-
-	* The cascade process does not distinguish between same-origin and cross-origin stylesheets,
-		enabling the content of cross-origin stylesheets to be inferred
-		from the computed styles they apply to a document.
+<h2 id="privacy">
+Privacy Considerations</h2>
 
 	* User preferences and UA defaults expressed via application of style rules
 		are exposed by the cascade process,
 		and can be inferred from the computed styles they apply to a document.
 
+<h2 id="security">
+Security Considerations</h2>
+
+	* The cascade process does not distinguish between same-origin and cross-origin stylesheets,
+		enabling the content of cross-origin stylesheets to be inferred
+		from the computed styles they apply to a document.
+
 	* The ''@import'' rule does not apply the [=CORS protocol=] to loading cross-origin stylesheets,
 		instead allowing them to be freely imported and applied.