Added unittests for the xss bug.
Updated Django versions used for testing.
Updated changelog.