Added 2.4.12 changelog
API Escape form validation messages (SS-2013-008)
FIX Auto-escape titles in TreeDropdownField

Related to SS-2013-009. While the default "TreeTitle" was escaped
within the SiteTree->TreeTitle() getter, other properties like SiteTree->Title
weren't escaped. The new logic uses the underlying casting helpers
on the processed objects.
Merge pull request #2451 from chillu/pulls/escape-2.4

Escaping 2.4