Fixed cross-browser edge-cases, an XSS, and allowed for multiple classes in zencode