2.8.4: Security and Minor Patch Release

announcements
1

Discourse 2.8.4 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on lack of change than lack of bugs - all releases, including those on tests-passed and beta are production ready.

Changes

Security:

  • Remove auto approval when redeeming an invite
  • Do not expose banner data in login_required sites

Bug Fix:

  • Approves user when redeeming an invite for invites only sites
  • Ensure theme JavaScript cache get consistent SHA1 digest
  • Ensure values are escaped in select-kit dropdowns
  • Buggy topic scrolling on iOS 12

Developer:

  • Cleanup body.scrollTop usage
  • Fix auto start for wizard qunit tests
7 Likes