Thanks for the reply! Either way those using version 2.35.3 should update to 2.35.5 according to the security announcement DHIS2 security patch release 2.34.4, 2.35.5 and 2.36.1 are now available so @Matthew_Boddie would you agree that the soultion for users is to update to 2.35.5? 
Thank you!
I also see that you had created a jira bug issue for this: [DHIS2-11032] - Jira! Since the update, I will mention you in the ‘bug hunters’ in the copmonthly for November! Thanks! (: