3.5.1: Security and maintenance release

Announcements
3

Even more!

But wait, there’s more! We do our best to highlight new features and changes for you, but there’s always too many changes to detail. For a full list of new features, bug fixes, UX improvements, and more, be sure to review the Additional Features and Fixes listed below.

All Features and Fixes

Bug Fixes

  • Include TOS and Privacy Policy URLs in signup when login require… (34985)
  • Exclude non-text user fields from watch word check (34651)
  • Handle lower case dark (34444)
  • Broken base_scheme_id migration when base is default (34430)
  • Allow creating new color palettes based on custom palettes (34351)
  • Required confirmations not showing up (stable) (34508)
  • DiscourseConnect & SiteSetting.auth_immediately = false (stable) (34443)
  • Support light-dark on older browsers (stable) (34441)
  • Restore styles in finish-installation route (34422)

Security Changes

  • AI helper suggestions based on a topic should check user has access to it
  • Rich editor chat transcript XSS
  • Use nonce-based restrictions during restore
3 Likes