OpenAtlas

It's a bug and you definitely not stupid ;)

Thank you very much for reporting and adding helpful console information.

The bug was most likely introduced when securing the application against cross site script attacks. Since this bugs are hard to detect (can't be testet with our unit tests) the bookmarks ajax requests slipped through.

It's fixed and will be part of the next release. Not sure if we wait for the next "normal" release or make a point release before so please add a note here if it's important for your workflow.