Add security update to changelog re esc get_field