diff --git a/changelog.d/media-proxy-network-path.security b/changelog.d/media-proxy-network-path.security
new file mode 100644
index 000000000..681d4742e
--- /dev/null
+++ b/changelog.d/media-proxy-network-path.security
@@ -0,0 +1 @@
+Proxy media given as network-path URLs (//host/path), so remote HTML cannot load images directly