Add client-response Threat Model and update JS ClientsRequests

Add client-response Threat Model and update JS ClientsRequests #7266