2.8.0.beta5：PM 改进、未见视图、允许按信任级别上传头像等

[jomaxro (Joshua Rosenfeld)]

2.8.0.beta5 中的新功能

个人/群组消息改进

我们为消息界面添加了许多改进。

• 轻松切换个人和群组收件箱。
  
  
• 新增“所有收件箱”视图，可同时查看个人收件箱以及用户有权访问的任何群组收件箱中的消息。
• 新增和未读消息列表——轻松查看您尚未查看的新消息，即使其他群组成员已经阅读并归档了这些消息。
  
  
• 支持批量忽略“新增”或“未读”消息

允许管理员删除用户的所有帖子

默认情况下，Discourse 仅允许在用户帖子少于 15 条时删除其“所有帖子”。这有助于确保拥有大量帖子的用户不会被删除，而工作人员却不知晓帖子数量。管理员始终可以修改站点设置，以删除拥有更多帖子的用户。为避免管理员频繁更改设置，现在管理员不受此限制。系统会显示警告，允许管理员删除所有帖子。版主仍受此限制影响。

改善“空白页面综合症”

新用户以及没有帖子、点赞、通知等的用户，经常会在 Discourse 中进入“空白”页面。Discourse 现在不再显示空白页面，而是适时显示信息，帮助用户了解最终将显示的内容。此类内容已添加到通知页面、书签页面、消息页面以及用户菜单中。

新增“未查看”视图

Discourse 现在支持“未查看”视图，与“最新”、“新增”、“未读”、“热门”等视图并列。“未查看”会显示用户未屏蔽且包含未读帖子的所有主题。这包括用户从未阅读过的新主题，以及用户部分阅读过的主题。

用户可以通过 /unseen 访问“未查看”视图，管理员也可以通过 top menu 站点设置将“未查看”添加到顶部菜单。

在用户菜单中显示草稿数量

用户拥有的草稿数量现在会显示在用户菜单中。草稿数量也会显示在用户活动页面上。

按信任等级允许上传头像

此前，管理员可以禁用对自定义上传用户头像的支持，但这会影响站点上的所有用户。allow uploaded avatars 站点设置现在支持信任等级，使站点能够阻止低信任等级用户上传头像，同时允许高信任等级用户上传。

无障碍功能

为屏幕阅读器添加了“跳至主要内容”链接。

[jomaxro (Joshua Rosenfeld)]

Even more!

But wait, there’s more! We do our best to highlight new features and changes for you, but there’s always too many changes to detail. For a full list of new features, bug fixes, UX improvements, and more, be sure to review the Additional Features and Fixes listed below.

Security Updates

This beta includes 6 security fixes for issues reported by our community and HackerOne.

• Escape cat name
• User’s read state for topic is leaked to unauthorized clients.
• Sanitize d-popover attributes
• Destroy EmailToken when EmailChangeRequest is destroyed
• Don’t leak user of previous whisper post when deleting a topic.
• Do not reveal post whisperer in personal messages.

Plugin improvements

Many plugins

• Translations
  • We’ve updated the translations in many of our plugins

Assign

New Features

• Assign to group
• Improve blank page syndrome
• Improves random assign automation

Bug Fixes

• Correct group icons and notification message
• Ensure move_to_inbox does not raise error when unassigned
• Broken suggestions
• Whisper small actions are blank
• Makes dropdown use absolute positioning
• Explicit assign on user selection
• Hide Unassigned if user doesn’t have access

Intercom

Bug Fixes

• Discourse.User is deprecated

Voting

UX Changes

• Add quick search suggestion

Patreon

Bug Fixes

• Deprecated use of decorators

Calendar

Bug Fixes

• Expired/non-expired events logic
• expired option in EventFinder didn’t work
• Firefox doesn’t allow pseudos on inputs
• Slider input needs z-index for Chrome

Data Explorer

New Features

• Get rid of the import a query modal

Bug Fixes

• The back button

Solved

New Features

• Show number of accepted answers on user card
• Show user who posted accepted answer second

Bug Fixes

• Stop register_topic_list_preload_user_ids from breaking old versions
• Correctly serialize accepted_answers
• Pin the plugin in commit for old versions of Discourse.

UX Changes

• Do not show composer education message if the post is whisper

Encrypt

New Features

• Decrypt bookmark titles

Bug Fixes

• Anonymous users cannot encrypt PMs
• Always decrypt topic titles
• Search cache can contain only first posts
• Include only results that user can read
• Do not download and decrypt same file twice
• Get rid of logical or assignments
• Ensure post_search_data is present
• Do not add result if already present
• Show activation modal if identity is missing
• Decrypt titles from generic elements first
• Show image uploads in composer preview
• Show decrypted topic title in window name

UX Changes

• Mimic copy-button behavior

Performance

• Fetch all mentions, hashtags and uploads

SAML

New Features

• Update user locale based on user attributes on response.
• Sync user fields as per saml_user_field_statements env variable.

RSS Polling

New Features

• Allow setting discourse category for each feed
• Handle Youtube RSS feeds
• Allow filtering a feed on the category property of items

Theme Creator

Bug Fixes

• Ensure themes can still be serialized if users are missing
• Don’t use Discourse.User anymore

Zoom

Bug Fixes

• Call the parent implementation of ContentSecurityPolicy::Extension.path_specific_extension

Reactions

Bug Fixes

• Do not return deleted posts in my-reactions

Saved Searches

Bug Fixes

• Allow empty saved searches set
• Don’t rely on Discourse global

OpenID Connect

Bug Fixes

• Ensure nonce mismatch causes auth to fail correctly

Category Experts

Bug Fixes

• Don’t run event hooks when plugin is disabled

LTI

New Features

• Allow ‘reconnect’ for LTI logins

Antivirus

New Features

• Export health metrics to Prometheus.

Additional Features and Fixes

Click to expand

New Features

• Option to update default notification level of existing users.
• Create notification for redeemed invite
• Uppy direct S3 multipart uploads in composer
• Allow adding small action codes dedicated to groups
• Order pinned topics by their pinned_at column
• Rate limit exceptions via ENV
• First pass of using uppy in the composer
• Allow linking an existing account from invite acceptance
• Allow linking an existing account during external-auth signup
• Revert disallowing putting URLs in titles for TL0 users
• Disallow putting urls in the title for TL-0 users
• Send user-card:show event
• Attach backup log as upload
• Add post edits count to user activity
• Onebox can match engines based on the content_type
• Initial implementation of direct S3 uploads with uppy and stubs

Bug Fixes

• Use named params correctly with dir-span
• Jump to reply button in post stream was not working
• Ensure id sequences are not reset during db:migrate
• Update PresenceChannel#present to work for redis 6.0
• Allow PresenceChannel to work on Redis 6.0
• Correctly apply unusual padding to profile dropdowns
• Capture S3 metadata when calling create_multipart
• Correctly display GitHub code oneboxes
• Do not send emails to mailing_list_mode subscribers for PMs
• Topic reset_new unscoped causing huge queries
• Do not prefix temp/ S3 keys with s3_bucket_folder_path in S3Helper
• The LogsNotice service was never unsubscribing from the mbus
• Remove spacing from GitHub oneboxes
• Add plugin event to topic list user lookup
• Make user-card-metadata plugin outlet tagless
• Order outputted theme stylesheets
• Restructure temp/ folders for direct S3 uploads
• The empty state message was appearing in wrong moments on the user bookmarks stage
• Do not allow negative values for LIMIT
• Use original from address when forwarding to group inbox
• Minor SK3 styling issues in Safari
• Discard old search results if search term changes when moving posts to a different topic
• Sk3 wizard regressions
• Do not focus after search if dropdown is collapsed
• Close emoji autocomplete when the opening colon : is removed
• Reset preProcessorStatus state correctly for composer-upload-uppy
• Use file.id instead of file.name for media-optimization resolvers
• Adding debugging and fixing media-optimization-worker issues
• Always reload post’s raw when editing a post
• Pick-files-button component
• Make themes:update work with multisites
• Deprecated method should still behave the same.
• Revoking admin or moderator status doesn’t require refresh to delete/anonymize/merge user
• Do not show default locale option on site text customization
• Bookmark delete button alignment in modal-footer
• Include tags in quick search suggestions
• Add a string for the Unseen view tab tooltip
• Remove markers from all translated languages
• Log proper error message when SSO nonce verification fails
• Make site tasks work with duplicated uploads
• Unread group PMs should use GroupUser#first_unread_pm_at.
• If the category slug is not present then search via ID
• Move bookmark modal buttons into modal-footer
• Uses keyUp as widgets dont handle bubbling
• Do not display the color scheme ID in interface dropdown
• Allows paste from context menu to work
• Pass fileName to error handler for media optimization
• Clean up upload events properly in composer
• Composer Processing/Uploading status not clearing on cancel and trash
• Paste event not propagating from composer using Uppy
• Button alignment on messages
• Query the items in the queue to calculate a user’s flagged post count.
• Unescapes hash section with present to account for url-encoded chars
• TopicTrackingState.report not including unread for staff posts.
• Notification menu broken on older browsers
• Category group moderators can read flagged post meta_topics
• Check if BasicBadge is enabled for TL1 welcome message
• Fix rtl style for pull right
• Prevents exception on malformatted messages
• Do not show private group flair on user avatars"
• Reuse avatar-flair component in group preview
• Errno::EXDEV when across filesystem boundaries
• Prevents s shortcut to generate an error
• Don’t swallow an error if we can’t run yarn ember build
• Do not show flair bg color if flair is not visible
• Update iframe url for simplecast onebox
• Update oEmbed URL for simplecast onebox
• Group inbox new filter not accounting for dismissed topics.
• Remove limit on dismissing unread and new messages.
• Restore server side route for tag messages filter.
• Wrong default notification level shown for group
• Remove Nokogumbo references
• Update draft count when sequence is increased
• Make rake site:export_structure export uploads
• Use search message context on group message page
• Use update_attribute method to trigger callbacks.
• Remove ‘reply above line’ marker
• Consistently show history modal when clicking edit notifications
• Inline secure images with duplicated names
• Adjust poll buttons
• Use reply-to address for incoming emails if present
• Upload placeholder was missing line break
• Make search work with sub-sub-categories
• Do not show private group flair on user avatars
• Better composer placeholder handling during media optimization
• Validate value of custom dropdown user fields - dropdowns and multiple selects
• Remapping of uploads could fail during restore of backup
• Do not offer to save draft if invalid
• Typu in intercept-click
• Update draft count after creating a post
• Add users-directory-controls outlet to mobile template
• Allows authentication data to be present in bootstrap
• Avoid creating a post revision when topic tags have not changed.
• PM tags route should work for usernames with a period.
• Reduce input of to_tsvector to follow limits
• User can change name when auth_overrides_name is enabled.
• Remove additional setting check for uppy-upload
• Changing the post owner didn’t update the reply_to_user_id of replies
• Don’t grant sharing badges to users who don’t exist
• Use correct URL in schema markup for post images.
• Do not raise exception when svg path is nil
• Show Uncategorized when unsubscribing
• Clear Site#categories cache when git sha changes.
• Don’t show the Tis Weekend option in date pickers on Sundays
• Don’t show the Later This Week option in date pickers on Sundays
• Better and more secure validation of periods for TopicQuery
• Show bulk button on PMs for all users
• Long poll if window becomes active

UX Changes

• Comma separate public custom field lists
• Select-kit update alignment fixes
• Better login/signup styling for small desktop windows
• Use existing guardian method to check messageable group.
• Display correct replies count in embedded comments view.
• Improve blank page syndrome on the user messages page
• Add Styling step to wizard
• Update “get a room” composer message
• Do not show selected composer education messages on whisper post
• Add a title to the user filter input
• README logo SVG that supports dark mode
• Add margin to share input
• Add data-topic-id to featured topic items
• Fix mobile PM nav for regular users
• Show flair help text for private member visibility only
• Indicate capped history revisions only when they’re actually capped
• Update member visibility help text to include flair information
• Fixes sidebar settings border and active styles
• Missing translation for title attribute for PM tag route.
• Disable “Queue For Review” button if user can’t perform action.
• Append ellipsis to actions that have follow-up screen
• Ensure external login icons are visible on hover
• UX Fixes
• Adds hover title with full date to admin users columns
• History controls should use nav-pill styles
• Improve copy when a group member search returns no results
• Use share modal in dominating topic msg
• User bookmark page style adjustments
• Update styling of readonly values in signup form
• Remove theme-specific css, fix space
• Prioritize moderator bg color in PMs

Performance

• Make TopicViewSerializer#requested_group_name more efficient.
• Remove redundant post_timings_summary index
• Generates dates tooltip on demand
• Reduces rendering time of local-dates