Backport #1597 in 2.8 branch too
diff --git a/release-notes/VERSION b/release-notes/VERSION
index 1f0d20c..fbb9592 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -3,6 +3,11 @@
 === Releases ===
 ------------------------------------------------------------------------
 
+2.8.9 (not yet released)
+
+#1597: Escape JSONP breaking characters
+ (contributed by Marco C)
+
 2.8.8.1 (19-Apr-2017)
 
 #1585: Invoke ServiceLoader.load() inside of a privileged block when loading