Security
- Disabled executable JavaScript frontmatter, including
jsaliases and case variants. These blocks stay unchanged as note content; safe JSON frontmatter still parses.
Fixed
- Windows-style CRLF notes keep their tags and line endings during frontmatter updates, tag changes, and append/prepend writes, including notes with empty or missing frontmatter.