Update CHANGELOG.md for 9.2.3

CHANGELOG.md

@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 9.2.3 (2017-05-31)
+
+- Move uploads from 'public/uploads' to 'public/uploads/system'.
+- Escapes html content before appending it to the DOM.
+- Restrict API X-Frame-Options to same origin.
+- Allow users autocomplete by author_id only for authenticated users.
+
 ## 9.2.2 (2017-05-25)
 
 - Fix issue where real time pipelines were not cached. !11615

changelogs/unreleased/28917-contain-uploads-in-system-dir.yml

----
-title: Move uploads from 'public/uploads' to 'public/uploads/system'
-merge_request:
-author:

changelogs/unreleased/32908-edit-comment.yml

----
-title: Escapes html content before appending it to the DOM
-merge_request:
-author:

changelogs/unreleased/dz-api-x-frame.yml

----
-title: Restrict API X-Frame-Options to same origin
-merge_request:
-author:

changelogs/unreleased/dz-restrict-autocomplete.yml

----
-title: Allow users autocomplete by author_id only for authenticated users
-merge_request:
-author: