safe() also replaces '%' with '_'
Add changelog record for PR #1121