From 31eac710f7612df54dce24958a6862614f553b70 Mon Sep 17 00:00:00 2001
From: jsteemann <jan@arangodb.com>
Date: Wed, 1 Mar 2017 13:56:42 +0100
Subject: [PATCH] updated CHANGELOG

---
 CHANGELOG | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/CHANGELOG b/CHANGELOG
index 27fc938f27..00cbb52c22 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,6 +1,13 @@
 devel
 -----
 
+* always validate incoming JSON HTTP requests for duplicate attribute names
+  
+  Incoming JSON data with duplicate attribute names will now be rejected as
+  invalid. Previous versions of ArangoDB only validated the uniqueness of
+  attribute names inside incoming JSON for some API endpoints, but not
+  consistently for all APIs. 
+
 * don't let read-only transactions block the WAL collector
 
 * allow passing own `graphql-sync` module instance to Foxx GraphQL router