Cleanup Issue #1139: delete legacy Execution History files + docs (wiki)
Execution Notes (read-only): record the #1808 code-review findings applied Documents the three applied review items (is_scalar guards for array query parameters, the headers_sent() guard on the refusal helper, and the corrected claim about how the gate compares to the shim), the regression the new group-10 test caught in the first attempt, and the cosmetic finding deliberately not applied. Refs #1808
Execution Notes (read-only): document the #1808 fragment same-origin gate Documents the residual half of #1808: the BFF's own action=fragment route - the innerHTML sink that 5 legacy url2load() call sites consume - answered 200 with the notes to Origin: http://evil.example while the shim answered 403 for byte-identical output, because bffSameOriginGuard() returns immediately for GET/HEAD and was structurally unreachable on this read-only endpoint. Records the measured before/after table, the file:line root cause, the fix scope and the honest severity statement, plus the new evidence screenshot. Refs #1808
Execution Notes read-only viewer execNotesReadonly (#1807) + security fix #1808 New wiki page for the read-only Execution Notes viewer (gui/templates/execute/execNotesReadonly.html + api/execnotesreadonly), with 4 screenshots: rich note, no notes recorded, a stored XSS payload rendered inert, and Access denied for a role-3 user. Also corrects the #1551 page, which claimed the read-only half of the pair was covered: it was not, and that controller authorized nothing but a session.