update changelog for js escape fixes