[DISCOURSE] - 3.4.0.beta3: Check for updates on What’s New page, filter by user in the review queue, threading in Chat DMs and group chats, and more

[AWS]

New features in 3.4.0.beta3

Check for updates on What’s New page

In the What’s New page within the admin settings there is a new Check for updates button. This allows admins to check for any new updates to this page immediately.

Filter by user in the review queue

Admins can now use the filter Reviewed By in the review queue to see all the flagged content a user raised.

Threading in Chat DMs and group chats

Enable Threading in Chat settings for DMs and group chats so any reply to a message will create a separate conversation thread

Mention counts in Chat threads

With this change new messages within a Chat thread will appear as a mention count on the thread itself alongside the Chat channel, Chat icon, and user notification.

Simplified invites

The process of inviting users is friendlier and easier to use. Creating an invite link now takes one click (editing link options are still available). Learn more…

Redesigned /about page

The About page has a new look, and is easier to customize. Via a new admin page linked from the page itself, you can add a banner, site summary and description, and specify how you would like to be contacted. Site activity is presented better and can optionally include EU specific visitor statistics. Learn more…

Restricting profile visibility of low TL users

We have introduced the following changes for low-trust level users to prevent abuse of user profile bios and other fields.

• Anonymous, TL0 and TL1 users cannot see any user profiles for users with 0 posts except for staff users
• Anonymous and TL0 users can only see profiles of TL1 users and above

Security Updates

This release includes fixes for these security issues reported by our community and HackerOne.

• Bypass of Discourse Connect using other login paths if enabled (CVE-2024-49765)
• Moderators can view Screened emails even when the “moderators view emails” option is disabled (CVE-2024-52589)
• Magnific lightbox susceptible to XSS (CVE-2024-52794)
• Potential Backup file leaked via Nginx (CVE-2024-53991)

2 posts - 2 participants

Read full topic