haiku-minimalist-audio-player XSS fixed in v1.1.0