Saberlve c6e1d20c68 fix: XSS vulnerabilities and error handling in import window ... - Escape creators, year, item_type fields in renderImportItemList and showItemPreview (was only escaping title and abstract) - loadImportState uses api() wrapper for proper error handling - generateSelectedCards uses api() wrapper with try/catch - Remove duplicate isImportWindowOpen in state object Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-04-15 20:34:42 +08:00
docs/superpowers	docs: add two-step import+card generation implementation plan	2026-04-15 17:04:08 +08:00
src/zotero_kb	fix: XSS vulnerabilities and error handling in import window	2026-04-15 20:34:42 +08:00
tests	feat: add two-column import window layout with batch generate	2026-04-15 20:28:16 +08:00