Add changelog entry for html5lib#11.

gsnedders · May 7, 2016 · 791533e · 791533e
1 parent be6230b
commit 791533e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -28,6 +28,12 @@ Released on XXX
 
 * Cease supporting Python 3.2 (in both CPython and PyPy forms).
 
+* Fix #11, avoiding the XSS bug potentially caused by serializer allowing
+  attribute values to be escaped out of in old browser versions, changing
+  the quote_attr_values option on serializer to take one of three values,
+  "always" (the old True value), "legacy" (the new option, and the new
+  default), and "spec" (the old False value, and the old default).
+
 
 0.9999999/1.0b8
 ~~~~~~~~~~~~~~~