Update CHANGELOG.md for 11.2.2

[ci skip]

CHANGELOG.md

@@ -2,6 +2,15 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 11.2.2 (2018-08-27)
+
+### Security (3 changes)
+
+- Fixed persistent XSS rendering/escaping of diff location lines.
+- Adding CSRF protection to Hooks resend action.
+- Block link-local addresses in URLBlocker.
+
+
 ## 11.2.1 (2018-08-22)
 
 ### Fixed (2 changes)

changelogs/unreleased/security-fj-missing-csrf-system-hooks-resend.yml

----
-title: Adding CSRF protection to Hooks resend action
-merge_request:
-author:
-type: security