add html_escape() function to escape HTML.
diff --git a/user_guide/changelog.html b/user_guide/changelog.html
index 19e659f..11a1537 100644
--- a/user_guide/changelog.html
+++ b/user_guide/changelog.html
@@ -64,6 +64,7 @@
 	<li>General Changes
 		<ul>
 			<li>Callback validation rules can now accept parameters like any other validation rule.</li>
+			<li class="reactor">Added html_escape() to the <a href="general/common_functions.html">Common functions<a> to escape HTML output for preventing XSS easliy.</li>
 		</ul>
 	</li>
 	<li>Helpers