Execution Notes read-only viewer execNotesReadonly (#1807) + security fix #1808 New wiki page for the read-only Execution Notes viewer (gui/templates/execute/execNotesReadonly.html + api/execnotesreadonly), with 4 screenshots: rich note, no notes recorded, a stored XSS payload rendered inert, and Access denied for a role-3 user. Also corrects the #1551 page, which claimed the read-only half of the pair was covered: it was not, and that controller authorized nothing but a session.
docs: Execution Notes execNotes #1551 (Refs #1551)