Update changelog

qutebrowser · May 2, 2020 · 1b7946e · 1b7946e
1 parent e15af6c
commit 1b7946e
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/doc/changelog.asciidoc b/doc/changelog.asciidoc
@@ -45,7 +45,16 @@ Fixed
 v1.11.1 (unreleased)
 --------------------
 
-No changes yet.
+Security
+~~~~~~~~
+
+- After a certificate error was overridden by the user, qutebrowser displays
+  the URL as yellow (`colors.statusbar.url.warn.fg`). However, when the
+  affected website was subsequently loaded again, the URL was mistakenly
+  displayed as green (`colors.statusbar.url.success_https`). While the user
+  already has seen a certificate error prompt at this point (or set
+  `content.ssl_strict` to `false` which is not recommended), this could still
+  provide a false sense of security. This is now fixed.
 
 v1.11.0 (2020-04-27)
 --------------------