CHANGELOG.md in onebox-1.6.5 vs CHANGELOG.md in onebox-1.6.6

@@ -1,3 +1,7 @@
+## 1.6.6
+
+  * SECURITY: normalize url for audio/video oneboxes
+
 ## 1.5.64
 
   * Escape HTML entities in text when oneboxing Amazon URLs.