prevent XSS in AQL editor
updated CHANGELOG