fix: Mozilla-Addon-Validierung korrigiert

- `data_collection_permissions` in `browser_specific_settings` ergänzt (`required: ["none"]`)
- `applications` → `browser_specific_settings` migriert (aktueller Manifest-Schlüssel)
- Unsichere `innerHTML`-Zuweisung in content-script.js durch `DOMParser` ersetzt

manifest.json

@@ -43,9 +43,13 @@
       "run_at": "document_idle"
     }
   ],
-  "applications": {
+  "browser_specific_settings": {
     "gecko": {
-      "id": "anyclip@example.local"
+      "id": "anyclip@example.local",
+      "data_collection_permissions": {
+        "required": ["none"],
+        "optional": []
+      }
     }
   }
 }

src/content-script.js

@@ -59,8 +59,7 @@ function getSelectionFragment() {
     return { text: "", element: null };
   }
 
-  const container = document.createElement("div");
-  container.innerHTML = lastSelectionHtml;
+  const container = new DOMParser().parseFromString(lastSelectionHtml, "text/html").body;
 
   return {
     text: lastSelectionText,