changelog
xss protection
fixed js in notes
march report changed to static version:
public deck list fix
js load async for deckbuilder