diff --git a/debian/changelog b/debian/changelog
index 9920c215a..68c95e622 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -43,6 +43,8 @@ ikiwiki (2.31.1) unstable; urgency=low
 
   * htmlscrubber security fix: Block javascript in uris.
   * Add htmlscrubber test suite.
+  * Thanks to Josh Triplett for pointing out the holes and for his help
+    in implementing and checking fixes.
 
  -- Joey Hess <joeyh@debian.org>  Sun, 10 Feb 2008 13:22:59 -0500