Added a line to CHANGELOG about escaping owner and app.