From 45ef7544285e9ff826a8e109880ff6ccf19e6b10 Mon Sep 17 00:00:00 2001
From: Yannick Warnier <ywarnier@beeznest.org>
Date: Tue, 21 Mar 2017 17:01:24 -0500
Subject: [PATCH] Add comment about new setting preventing the use of iframes
 by default

---
 documentation/changelog.html | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/documentation/changelog.html b/documentation/changelog.html
index 1a4ea8ff9b..2dc676288d 100755
--- a/documentation/changelog.html
+++ b/documentation/changelog.html
@@ -68,7 +68,9 @@
         <li>One <a href="https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-23-2017-02-09-Moderate-risk-PHP-File-Upload">more important fix for a PHP file upload flaw</a> that happens in the social network, for registered users only</li>
     </ul>
     <h3>Possibly breaking changes</h3>
-    <p>None in this version.</p>
+      <ul>
+        <li>As Chamilo becomes more popular, we are facing new security-based challenges that come as consequences of the simplicity that we offer our users. As such, in this version of Chamilo, the administrator *must* enable a configuration setting as follows in order <b>to authorize teachers and students to use iframes</b> (embedding things from outside) inside the online text areas in their courses and personal spaces. to enable those, edit the app/config/configuration.php file and paste the following just after the last setting: <pre>$_configuration['allow_course_introduction_low_security'] = true;</pre></li>
+      </ul>
 
     <h3>Notable new Features</h3>
     <h4>For end-users, teachers and Chamilo admins</h4>