update changelog

Pylons · Feb 5, 2024 · bc9e94f · bc9e94f
1 parent 4e5c297
commit bc9e94f
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,3 +1,13 @@
+unreleased
+----------
+
+- Fix a toolbar crash when loading the page and there aren't any visible
+  requests yet.
+
+- Fix a concern where the toolbar may access sensitive request attributes like
+  ``request.authenticated_userid`` at times outside of the supported request
+  lifecycle.
+
 4.12 (2024-02-03)
 -----------------