4.4.0
fix getAttribute exception in notes plugin #3285
notes plugin only listens for same-origin postmessages to prevent xss