# 일일 요약 (UTC 오전 5시) **URL:** https://meta.discourse.org/t/daily-summary-5am-utc/291851 **Category:** Forum summaries **Created:** [1월 16, 2024, 9:58오후 UTC](https://meta.discourse.org/t/daily-summary-5am-utc/291851 "2024-01-16T21:58:09Z") **Posts on this page:** 1 **Showing post:** 534
### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system) #### Post date: [7월 9, 2025, 5:02오전 UTC](https://meta.discourse.org/t/daily-summary-5am-utc/291851/534 "2025-07-09T05:02:16Z")
Today on [meta.discourse.org](http://meta.discourse.org)… ### Key Stats - **New posts:** 120 - **New topics:** 21 - **Top users (posts / likes):** - @Moin: 10 / 13 - @pfaffman: 4 / 8 - @merefield: 5 / 7 - @supermathie: 7 / 6 - @Lhc_fl: 1 / 5 - @Scott-CC: 8 / 4 - @featheredtoast: 3 / 4 - @renato: 2 / 4 - @JammyDodger: 4 / 4 - @jimkleiber: 4 / 3 ### Interesting Topics #Installation - **An upgrade knocked my site offline; how long until it’s restored?** @Scott-CC’s upgrade attempt showed the “Oops” error page, @JammyDodger and @Lhc_fl suggested safe-mode and log checks, @supermathie walked through `docker exec` and log-tailing, and @pfaffman resolved it with a rebuild and PostgreSQL 15 update. [read more](https://meta.discourse.org/t/-/373394/1?silent=true)[solution](https://meta.discourse.org/t/-/373394/13?silent=true) #Dev - **Can Discourse ship frequent Docker images that do not need to be bootstrapped?** @elmuerte explored blue/green deploy constraints on plugin and theme builds, while @featheredtoast shared a [proof-of-concept Docker Compose setup](https://meta.discourse.org/t/-/33205/206?silent=true) and explained why custom images must bake in extra gems and system packages. [read more](https://meta.discourse.org/t/-/33205/205?silent=true)[experiment](https://meta.discourse.org/t/-/33205/209?silent=true) #Bug - **New Composer Issue: Linked Images** The new markdown composer’s link button doesn’t support external images; @supermathie flagged the gap in the markdown UI, and @renato proposed an inline input rule for `![alt](url)` handling. [discussion](https://meta.discourse.org/t/-/373228/9?silent=true)[proposal](https://meta.discourse.org/t/-/373228/10?silent=true) - **New composer inserts double line breaks when pressing return key** Users noted that pressing ⏎ creates a new paragraph instead of a line break; @sam asked whether we should enforce tidy paragraphs and @awesomerobot pointed out that Notion and Medium share this behavior. [issue](https://meta.discourse.org/t/-/373229/10?silent=true)[comparison](https://meta.discourse.org/t/-/373229/11?silent=true) - **Discourse AI spam detection “Scan log” is frequently truncated** Admins testing the AI spam scan see valuable reasoning cut off in the logs; the thread calls for ensuring the full output is visible to refine custom instructions. [bug report](https://meta.discourse.org/t/-/373460/1?silent=true)[plugin](https://meta.discourse.org/t/discourse-ai-spam-detection/343541?silent=true) #Support - **See the failed jobs in Sidekiq. (MailGun) failing to send emails** @Aaron_Walsh saw 42 queued email retries after a Mailgun port change; @pfaffman walked through rebuilding vs. destroying the container to unblock port 2525. [report](https://meta.discourse.org/t/-/373384/1?silent=true)[resolution](https://meta.discourse.org/t/-/373384/6?silent=true) - **Sensitive information disclosure: OAuth2 client secret exposed in admin settings** @Evie_Tao warned that OAuth2 secrets show in plain text; @supermathie linked to a simple plugin fix to mark them as `sensitive=true` and discussed environment-based secrets. - _Potential Directory Traversal: /uploads/ allows cross-directory file access_\* A security assessment found that `../../` in `/uploads/default/original` can fetch unintended files; the thread suggests enabling the #secure-uploads feature for enforced access controls. [report](https://meta.discourse.org/t/-/373351/1?silent=true)[secure-uploads](https://meta.discourse.org/t/-/140017/1?silent=true) - **Personal Message attachments accessible to unauthenticated users (missing auth check)** @Evie_Tao discovered that private message images are publicly retrievable; the community again pointed at #secure-uploads for locking down PM assets. [report](https://meta.discourse.org/t/-/373355/1?silent=true)[secure-uploads](https://meta.discourse.org/t/-/140017/1?silent=true) - **A file does not exist error occurred during database backup** Manual backups fail with `rb_io_flush_raw - ` errors when dumping the public schema; admins seek guidance on backuper configuration. [error log](https://meta.discourse.org/t/-/373471/1?silent=true) - **Potential resource exhaustion: No rate limiting on /uploads.json allows mass file uploads** Security reviews flagged the lack of rate limits on the upload API, risking storage DoS; suggestions include custom throttle plugins or proxy-level limits. [report](https://meta.discourse.org/t/-/373358/1?silent=true) #UX - **Launch Composer from Topic Reply at foot of Topic: Draft missing on re-initiate** @merefield found that saved drafts don’t reappear when reopening the composer via the bottom reply button, though they do after page refresh. [issue](https://meta.discourse.org/t/-/373379/1?silent=true) - **Reviewable UI refresh site setting** Admins enabled the experimental review queue UI but saw no change; @Moin demonstrated that individual review items show the new design while the list view remains unchanged. [question](https://meta.discourse.org/t/-/373339/1?silent=true)[demo](https://meta.discourse.org/t/-/373339/2?silent=true) #wordpress - **Attempting to work around the 10 minute delay** @Lee_Ars struggled with WP Discourse comment sync delays; @angus walked through webhook setup, cache toggles, and header fixes for instant comment updates. [thread](https://meta.discourse.org/t/-/373254/3?silent=true)[webhook guide](https://meta.discourse.org/t/configure-wp-discourse-webhooks/311552?silent=true#sync-comment-data-5) #Feature - **Feature request: share to discourse (via iOS)** Building on the desktop bookmarklet and extension, @jimkleiber asked if iOS’s Apple App Site Association can deep-link into the Discourse PWA for quick topic creation. [iOS request](https://meta.discourse.org/t/-/365155/8?silent=true)[desktop extension](https://meta.discourse.org/t/-/21104/27?silent=true) ### Activity by the [@team](https://meta.discourse.org/groups/team?silent=true) Group - @supermathie guided @Scott-CC through log inspection in [the offline-upgrade thread](https://meta.discourse.org/t/-/373394/7?silent=true), flagged composer link gaps in [Linked Images](https://meta.discourse.org/t/-/373228/9?silent=true), assisted multisite favicon setup in [ICO favicons](https://meta.discourse.org/t/-/372494/4?silent=true), and proposed an OAuth2 secret masking fix in [Sensitive Disclosure](https://meta.discourse.org/t/-/373365/3?silent=true). - @featheredtoast experimented with Discourse Docker Compose in [the Docker images discussion](https://meta.discourse.org/t/-/33205/206?silent=true) and elaborated on custom image dependencies in [the same thread](https://meta.discourse.org/t/-/33205/209?silent=true). - @renato enhanced the new composer with an inline image input rule in [the Linked Images issue](https://meta.discourse.org/t/-/373228/10?silent=true). - @zogstrip resolved admin lockouts by fixing the read-only/SSO escape hatch in [the admin login recovery topic](https://meta.discourse.org/t/-/89605/14?silent=true). - @sam questioned tidy-paragraph conventions in [the line-break feature thread](https://meta.discourse.org/t/-/373229/10?silent=true) and shared BBCode plugin context in [the new composer announcement](https://meta.discourse.org/t/-/369779/8?silent=true). - @awesomerobot highlighted alternative editor chords in [the line-break discussion](https://meta.discourse.org/t/-/373229/11?silent=true) and clarified image UI behavior in [the composer rollout thread](https://meta.discourse.org/t/-/369779/7?silent=true). - @HAWK offered troubleshooting for ad-laden summary emails in [the daily summary support topic](https://meta.discourse.org/t/-/373400/2?silent=true). - @david identified the missing `