Update changelog to be more specific about xss issue
Update changelog to be more specific about xss issue

I probably motivated some people to upgrade to well.
(although they should upgrade anyway).

snoyberg/keter,snoyberg/keter