Changelog for 1.4.0-rc3 (go-gitea#3679)

CHANGELOG.md

@@ -4,6 +4,14 @@ This changelog goes through all the changes that have been made in each release
 without substantial changes to our git log; to see the highlights of what has
 been added to each release, please refer to the [blog](https://blog.gitea.io).
 
+## [1.4.0-rc3](https://github.com/go-gitea/gitea/releases/tag/v1.4.0-rc3) - 2018-03-16
+* SECURITY
+  * Refactor and simplify to correctly validate redirect to URL (#3674) (#3676)
+* BUGFIXES
+  * Update markbates/goth library to fix OAuth2 support (#3661) (#3663)
+  * Fix column removal in MSSQL (#3638) (#3640)
+  * Fix wiki inter-links with spaces (#3560) (#3632)
+
 ## [1.4.0-rc2](https://github.com/go-gitea/gitea/releases/tag/v1.4.0-rc2) - 2018-03-02
 * SECURITY
   * Fix escaping changed title in comments (#3530) (#3534)