changes-entries/escapehtml.txt

 *) Add the escapehtml function to the expression API, allowing to escape HTML
    strings to guard against HTML injections. [Ruediger Pluem]