recording changes

changelog.html

@@ -68,6 +68,9 @@ Upcoming changes</a>
 <div id="rc" style="display:none;"><!--=BEGIN=-->
 <h3><a name=v1.407>What's new in 1.407</a> <!--=DATE=--></h3>
 <ul class=image>
+  <li class='major bug'>
+    Implemented comprehensive preventive measure against cross-site scripting. 
+    (SECURITY-14)
   <li class=bug>
     Javadoc links on maven job page with only one module
     (<a href="http://issues.jenkins-ci.org/browse/JENKINS-9202">issue 9202</a>)

core/pom.xml

@@ -382,7 +382,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>org.kohsuke.stapler</groupId>
       <artifactId>stapler-jelly</artifactId>
-      <version>1.163</version>
+      <version>1.164</version>
       <exclusions>
         <exclusion>
           <groupId>commons-jelly</groupId>