v2.9.1

Code Review Fixes — Bugs, Security, Robustness

Bug Fixes

• Removed duplicate .db-tooltip class collision — old v1 tooltip system removed
• Six init* functions no longer stack duplicate document event listeners on repeated DAUB.init() calls
• Context menu positioning uses pageX/pageY — correct when viewport is scrolled
• initTexture, initTemperature, initNoise guard against duplicate handlers on re-init
• setAccent() validates hex input — rejects invalid values
• Modal focus trap re-queries focusable elements dynamically, excludes [disabled]
• propagateRadius separated read/write passes to avoid layout thrashing
• Data table border-collapse: separate preserves border-radius
• Vertical stepper connector uses transform: translateY(-100%) for reliable positioning
• Added -webkit-text-size-adjust: 100% for iOS Safari
• Dark themes use deboss shadow direction for --db-text-emboss
• Removed invalid JSON-LD SearchAction from index.html
• Added og:image:alt to demo.html and playground.html

Security

• Pinned renderjson CDN to v0.6.0 with SRI integrity hash
• Added isSafeUrl() guard for AI-generated image URLs
• API key input has autocomplete="off"
• Grid column layout from localStorage validated before CSS injection

Improvements

• StatCard icon rendering uses createElement instead of innerHTML
• Documented ::after pseudo-element override chain