--- a/NEWS	Wed Sep 25 17:16:54 2019 +0200
+++ b/NEWS	Thu Sep 26 10:03:35 2019 +0200
@@ -5,11 +5,12 @@
 -----------
 
 * Security: If remote access is enabled, HTTP authentication is also enabled by default
+* Security: New configuration option "ExecuteLuaEnabled" to allow "/tools/execute-script"
 * Log an explicit error if uploading an empty DICOM file using REST API
 * Name of temporary files now include the process ID to ease design of scripts cleaning /tmp
 * Fix compatibility of LSB binaries with Ubuntu >= 18.04
 * Fix generation of "SOP Instance UID" on split and merge
-* Orthanc Explorer: include the url search params into HTTP headers to the Rest API to ease usage of the Authorization plugin
+* Orthanc Explorer: include the URL search params into HTTP headers to the REST API to ease usage of the Authorization plugin
   Note that only the 'token', 'auth-token' & 'authorization' search params are transmitted into HTTP headers.
 * in /ordered-slices route, ignore instances without position/normal/seriesIndex
 * Fix lost relationships between CT and RT-STRUCT during anonymization