Update notes for submitted changes

* Prevent DoS through XML entity expansion