Discourse 3.0.3 Stable Release
Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on lack of change than lack of bugs - all releases, including those on tests-passed and beta are production ready.
Changes
Bug Fixes
- Improve performance of UserStat.ensure_consistency (#21044)
Security Changes
- Encode embed URLs (CVE-2023-29196)
- Ensure site setting being updated is a configurable site setting (CVE-2023-30606)
- Strip
xlink:hreffrom uploaded SVGs (CVE-2023-30538) - Update URI gem to 0.12.1 to address CVE-2023-28755 (Advisory)
- Limit URL length for theme remote (CVE-2023-28440)