update changelog

aaronpk · aaronpk · commit 5aef6a870fa7 · 2025-10-17T16:57:32.000-07:00
diff --git a/draft-ietf-oauth-v2-1.md b/draft-ietf-oauth-v2-1.md
@@ -3906,6 +3906,7 @@ Discussions around this specification have also occurred at the OAuth Security W
 * Editorial clarifications
 * Corrected an instance of "relying party" vs "resource server"
 * Add references to `client_secret_post` and `client_secret_basic` terms from RFC7591
+* Replaced "sanitize" language with treating as untrusted input
 
 -13
 
