2.9.0.beta10：侧边栏、新的通知菜单、安全修复程序等

[jomaxro (Joshua Rosenfeld)]

2.9.0.beta10 中的新功能

侧边栏和新的通知菜单

Try out the new sidebar and notification menus!

We’ve been working on some significant new navigation features, and we’re now at a point where we’d love to start getting more feedback from you! Have and idea or question about these features? Come hang out with us in the #sidebar-feedback chat channel or start a new topic tagged with sidebar. Over the years, Discourse has grown to serve a larger set of communication and collaboration needs for diverse groups within the communities that rely upon the platform. Many c…

安全更新

此测试版包含 4 项针对社区和 HackerOne 报告的问题的安全修复。

• 处理不完整的引用 bbcode (CVE-2022-39232)
• 限制用户个人资料字段长度 (CVE-2022-39226)
• 版主不应通过 API 导入主题 (CVE-2022-36068)
• 解压文件时防止任意文件写入 (CVE-2022-36066)

记住调整后的编辑器高度

觉得编辑器的默认高度太小？也许你的屏幕较小，觉得它太大了？Discourse 现在会记住你调整编辑器高度的操作，并每次都以你选择的高度重新打开编辑器。

新的 personal message enabled groups 站点设置

enable personal messages 和 min trust to send messages 站点设置已被 personal message enabled groups 取代。站点管理员现在可以配置哪些组能够发起私人消息。

提醒发送给很久未登录用户的私人消息

当用户创建私人消息并添加一个很久未登录的收件人时，现在会在编辑器中显示警告。

附加功能

• 添加站点设置以禁用共享链接中的用户名
• 使用键盘箭头导航表情符号选择器
• 为时间轴的开始/结束日期添加工具提示
• 在新实例中将 Lounge 类别替换为 General
• 为 /u/admin-login 添加安全模式切换
• 更早提示 PWA 用户启用推送通知
• 添加全屏编辑器提交按钮和提示

更多！

但等等，还有更多！我们尽力为你突出新功能和变更，但总有太多变更无法详述。要获取新功能、错误修复、用户体验改进等的完整列表，请务必查看下面列出的附加功能和修复。

[jomaxro (Joshua Rosenfeld)]

Plugin improvements

Solved

Bug Fixes

• Pin stable to working version

UX Changes

• Show blank page placeholder instead of the blue panel that says “No Activity”

Graphviz

Bug Fixes

• Prevents exception if no title has been provided

Assign

New Features

• Add assigns tab to the experimental user menu

Bug Fixes

• Don’t fail because flair_uploads weren’t eager loaded
• Move types of the assign notification list to the tab class
• Use grouped_unread_notifications
• Count only active assignments when checking limits
• Error bulk deleting posts when action post is already deleted
• Find better users for automatic assignment
• Check if assignment has same user and details

UX Changes

• Add title for the assign tab in the user menu

OpenID Connect

Bug Fixes

• Correctly handle sub mismatch between idtoken and userinfo

Policy

Bug Fixes

• Moves locales to top level to support title

Chat Integration

New Features

• Introduce Guilded as a provider

Subscriptions

Bug Fixes

• Promo code placeholder

Salesforce

New Features

• Add new site setting to change authorization server’s url.

Bug Fixes

• Add field to preloaded_topic_custom_fields
• Fix references to find_id_by_email

Follow

Bug Fixes

• Send a single notification

Automation

New Features

• Post script
• Clean global notices when user posts
• Remove from group trigger
• Allow tag filter on after post cooked

Bug Fixes

• Escape HTML tags before rendering delete button

Upvotes (formerly Q&A)

Bug Fixes

• Clarify error message for undo vote action window
• Make sure QA topic class is applied in all the cases

Reactions

Bug Fixes

• Show not-allowed cursor if topic is archived

Chat

New Features

• Adds support for unreliable network
• Show user status on the direct message channels on the sidebar
• Hides public channels section if unusable
• Allow changing DM channel notification settings
• Show user statuses in search results when sending a direct message

Bug Fixes

• Do not desktop/mobile notify on muted channel
• Reply-to element was making x-scroll appear
• Dev populate still breaks with missing admin user
• Make the scrollbar visible on iOS
• Minot tweaks to emoji picket in chat message
• Ensures refreshTrackingState does nothing in anonymous
• Reverts part of 1b30db
• Search do not filter on following
• Move types of the chat notification list to the tab class
• Moves emoji picker anchor inside msg-actions
• Various emoji-picker positioning issues
• Renders emoji-picker out of message
• Only translate on chat-message-container
• Moves chat-msg-actions-mobile into live-pane
• Tweaks to live pane scroll
• Zoom check doesn’t work with tests
• Prevent deleting a category that has channels
• Minor tweaks to skeleton
• Use grouped_unread_notifications
• DiscourseComputed acting oddly in controller native class on prod
• /chat/chat_channels/:id is only for json
• Only checks if user is present and has unread messages
• Ensures uploads are not overflowing their container
• Ensures dms are sorted on new-channel event
• Arrow Up should edit last non staged message
• Correctly supports unicode mentions
• Deletes trashed messages when hitting retention limit
• Display error when switching channels returns a 429
• Only acting user should track channel on creation
• Relies on core composer-height which should now be correct
• Update class for hiding bootstrap mode notice
• Prevents esc shortcut to remove content when in full page
• Don’t fire multiple scroll events when scrolling to the future.
• Correctly links to channel message
• Don’t try to scroll to the last read message when fetching from latest.
• Don’t show user status on direct message channels with multiple users
• Don’t scope MB messages only to staff groups for public channels

UX Changes

• Add title for the chat notifications tab in the user menu
• Add lazy loading and dominant-color placeholder for uploads
• Add help text for webhook URL and remove from index page
• Tweak composer padding
• Reduce padding when keyboard is visible
• Tweak padding on mobile
• Tweak the composer styling
• Fix alignment of full-page-header elements
• Positions emoji picker on top by default
• Implements a chat skeleton loader
• Improves retry send staged message style
• Hide chat image overflow
• Show status next to posts using new component with rich tooltip
• Show status on the direct message chats list using new component with rich tooltip
• Makes oneboxes full width to prevent different width
• Always applies a 15px right margin to the drawer
• Adds small margin on top of chat composer

Security Changes

• Ensure htmlSafe content is properly escaped.

Calendar

New Features

• Add Aussie national day of mourning
• Allow for longer event title names

Bug Fixes

• A typo in #321
• Add translation entry for Indonesia
• Reintroduce holiday sub-regions removed due to consolidation
• Update regions translation to include Ghana

Templates

New Features

• Insert templates in any textarea using keyboard shortcut

Data Explorer

Bug Fixes

• Allow groups to access system queries
• Fixed the blueing of the bookmark icon

Additional Features and Fixes

Click to expand

New Features

• Optionally show user status on email group user chooser
• Add review link to community section for logged in user
• JS API interface for hljs plugins
• New site setting to set locale from cookie for anonymous users.
• Add site setting to include user associated account ids.
• Make user status a public experimental feature
• Overhaul email threading
• Show user status description on the mention popup
• Make user status on post streams live
• Adding a simple CSV importer
• Count views on published pages
• Limit maximum recipients for group emails
• Show default custom date on time-shortcut-pickers
• Trigger backup_failed event on backup failure
• Open create invite modal from the bootstrap notice banner
• Allow configuration of smtp timeout settings
• Allow wizard checkbox field to be disabled
• Show status in search results when mentioning user in composers

Bug Fixes

• Use Category#category_text for sidebar title
• Migration typo for secure_uploads
• Ensure composer grippie stays visible
• Some composer messages were broken
• 404 sending beacon “leave all” on subfolder install
• Recursively tag topics with missing ancestor tags
• Make sure featured category topics are unique
• List_suggested_for conditional for personal_message_enabled_groups
• Better virtual keyboard detect on Android
• Update user results page when no users found
• Incorrect casing for CTA
• Query correct model in posts:inline_uploads
• Handle failed download when calculating image dominant color
• Sidebar categories for anonymous not being sorted by name
• Skip uncategorized category in sidebar when disabled
• Respect site settings for sidebar users, groups and badges link
• Hide experimental user navigation changes when disabled
• DB migration fails if old site setting has empty value
• Add missing string for reviewables in user menu when reviewable post is deleted
• Sidebar scroll fade on older iOS
• Fix GitHub onebox syntax highlight
• Overriding text with admin_js.* keys didn’t work
• Empty inline BBCodes were broken
• Header offset position was not correct in some cases
• Do not attempt to serialize Tag objects when tagging disabled
• In-page anchor links were broken in subfolder setups
• Don’t delete previous messages when we’re inside the sent_recently window.
• Correctly pass invite_to_topic param to invites
• Ensure loading thumbnails are used in Safari
• Ensure low-resolution placeholders are used while loading images
• “Exit setup” link should exit the wizard and take user to homepage
• Regression with admin user delete dialog buttons
• Ensure <script> handlebars templates are namespaced correctly
• Raw translation string in user status tooltip
• Theme components should work with empty locale files
• Use plugin’s defined name for es6 module path
• Ensure discovery-categories always clears PreloadStore
• Create single notification per post and user
• Do not show “create topics” notice on wizard route
• Keep private theme key secret from user
• Return next bookmarks page only if it exists
• Immediately show sql options when badge query is supplied
• Hide welcome topic banner as soon as the welcome topic is edited
• Transpile start-discourse.js to fix iOS12 support
• Allow .git end to miss from Git repo URL
• In prod builds classes may not be “instancesof” EmberObject
• Avoid leaking TopicTrackingState listeners due to sidebar
• Only seed general category on new sites
• Do not save default auto_delete_preference for bookmark
• Do not notify admins watching PM tags
• Do not invite whisper or small action posters
• Show tag chooser if can_tag_pms
• Preload topic_list correctly for categories+latest
• Skip topic allowed user for small actions
• Restore trust level when leaving group
• Reload styling changes for wizard styling step
• LocalJumpError : unexpected return
• Prevents iOS software keyboard to hide sk body
• Remove unexpected scrollbar from the new user menu
• Load admin-specific JS when compiling via ember-cli
• Sidebar hamburger panel dropdown not working for anonymous
• Avoid duplicate topic-list requests
• Hide sidebar toggle button when no sidebar
• Hide sidebar for anonymous when login required
• Backup/Restore didn’t use correct Redis namespace in multisite
• Ignore malformed HTML for title extraction
• Move show like logic to client side
• Track native class deps in discourseComputed
• Remove “–composer-height” style when composer is closed
• Improvements to like button for archived topics
• Allow match_all_tags to be passed as a URL param
• Remove last_unread_post excerpt logic for bookmarks
• Allow extra whitespace when asking discobot to perform a bot command
• Limit new and existent staged users for email topics
• Show hide bootstrap mode notice in real time
• Disable Twitter onebox without API support
• Set --composer-height when the composer is in collapsed state
• Welcome topic title was not editable
• Recover from guardian check when deleting reviewable users.
• Ensure topic-list adapter never serializes undefined
• Don’t raise on deleted topic in UpdateHotlinkedRaw
• Markdown-it parse fn requires an env arg with {} as default
• Regression with Categories nav item
• Reset flair group if user is removed from group
• Remove dead and large images from oneboxes
• Don’t preview color scheme if it’s not current user’s profile.
• Don’t notify editor when category or tag change

UX Changes

• Fix composer position on Firefox for Android
• Add flag icon for review section link in sidebar
• Correct padding and height for sidebar section message
• Add icons to all section links in Sidebar
• Restore full sized composer on mobile
• Style changes to match updates
• Restrict width of “reply where” modal
• Fix cut-off accents in sidebar headings
• Fix topic stream placeholders
• Truncate site text titles in a cleaner way
• Add short site description for anonymous user in sidebar
• Clicking on a button in sidebar on mobile should collapse it
• Add ability to scroll when height is limited
• Use dominant color as image loading placeholder
• Add icons to all navigation link on user page
• Welcome topic CTA adjustments
• Use the same text for linking to more categories and tags in sidebar
• Avoid showing text cursor on unselectables
• Remove height CSS preventing sidebar touch scrolling on mobile
• Improve styling of sidebar on mobile
• Do not mark activity table heading as a cursor
• Retry “left-align title with content for sidebar (#18202)”
• Improve composer toolbar flexibility
• Left-align title with content for sidebar
• Sidebar more link for categories & tags
• Switch wizard SVG colors for dark mode
• Trigger tooltips on click for touch devices
• Change posted notification icon to discourse-bell-exclamation
• Make user status emoji on post stream smaller
• Fix width of preview pane to fix scroll
• Close the revamped user menu when opening modals
• Show information about badge errors when saving
• Improve max-height value on toolbar popup menu
• Increase sidebar fontsize on mobile
• Remove focus on hamburger icon after toggle
• Fix styles for the wizard congrats step
• Remove confusing fallback locale warning
• More apparent focus styles for sidebar headers
• Revert sidebar scrollbar repositioning
• Sidebar styling, spacing consistency, etc
• Hide background image in crawler view
• Add badges section link to community section.
• Remove sidebar section header background highlight on focus
• Do not show site header on wizard pages
• Fix topic admin menu hidden on narrow screens
• Adjust scrollbar behaviour in sidebar
• Hide chat image overflow
• Correctly center the reply-where modal
• Fix typo in a blank page copy
• Improve empty state copy on the activity/replies page
• Show blank page placeholder instead of the blue panel that says “No Activity”
• Don’t shrink avatar/number box
• Revamp styling of sidebar
• Make popup menu options scroll on limited screen height
• Sort tags alphabetically in sidebar
• Sort categories alphabetically in Sidebar
• Make category section link icons consistent with Sidebar’s interface
• Make Sidebar more consistent with user menu on mobile
• Add flat text button styles and use in date/time cancel modal
• Improve safe-mode usability
• Reduce font-size of sidebar section link suffix icon
• Improve styles of the user status message component
• Remove extraneous margins in profile pic modal

Performance

• Do not double bundle common langs in hljs bundle
• Skip image placeholders when secure_media is enabled
• Rely on preload for first_post for TopicBookmarkable
• Minify admin and wizard JS bundles to match app
• Only load the current user’s topic_user for bookmarks list
• Add exponential backoff for DistributedMutex

Accessibility

• Improve user card accessibility
• Multiple fixes to user stream items
• Associate label with input in bookmark modal
• Add aria label to composer messages Esc button
• Accessible full-screen and minimize composer buttons
• Use button in d-modal-cancel component
• Don’t include aria on reply count span element
• Add clearer focus states for date picker elements
• Keep composer as focused element when dismissing Link modal via keyboard
• Add focus state for advanced search toggles
• Improve group box hover highlight on dark schemes
• Ensures featured topic btn is focused when modal closes
• Makes toolbar tabindex independent from its context
• Moves anchor rendering out of conditional to prevent losing focus