Add notes for 2016-09-30

public/post/index.xml

@@ -636,6 +636,14 @@ $ ./delete-metadata-values.py -i ilrisubjects-delete-13.csv -f cg.subject.ilri -
 <ul>
 <li>Add <code>cg.identifier.ciatproject</code> to metadata registry in preparation for CIAT project tag</li>
 <li>Merge changes for CIAT project tag (<a href="https://github.com/ilri/DSpace/pull/282">#282</a>)</li>
+<li>DSpace Test (linode02) became unresponsive for some reason, I had to hard reboot it from the Linode console</li>
+</ul>
+
+<h2 id="2016-09-30">2016-09-30</h2>
+
+<ul>
+<li>Deny access to REST API’s <code>find-by-metadata-field</code> endpoint to protect against an upstream security issue (DS-3250)</li>
+<li>There is a patch but it is only for 5.5 and doesn’t apply cleanly to 5.1</li>
 </ul>
 </description>
     </item>