# Discourse 2.1.0.beta5 Release Notes
**URL:** https://meta.discourse.org/t/discourse-2-1-0-beta5-release-notes/95331
**Category:** Announcements
**Tags:** release-notes
**Created:** [August 21, 2018, 7:55pm UTC](https://meta.discourse.org/t/discourse-2-1-0-beta5-release-notes/95331 "2018-08-21T19:55:40Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [August 21, 2018, 7:55pm UTC](https://meta.discourse.org/t/discourse-2-1-0-beta5-release-notes/95331/1 "2018-08-21T19:55:40Z")
# New features in 2.1.0.beta5
### Discourse-checklist is now official
We’ve finally adopted the Checklist plugin by @cpradio! Make your lists much more interactive with this plugin.
> [@Discourse Checklist](https://meta.discourse.org/t/checklist-plugin-interactive-checkboxes-made-simple/36362):
>
> discourse2Summary Discourse Checklist allows checkboxes to be added to posts with simple Markdownopen_bookInstall Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately. Enabling Checklist The Checklist plugin is enabled by default but can be disabled/enabled from its settings, accessed from your admin/plugins page: [Checklist settings] Features Once enabled, you can add checklists to your posts by typing them in like thi…
### Automatically expire unused API keys
For enhanced security, Discourse will automatically expire API keys that have not been used for long periods of time. Search for `expire_user_api_keys_days` in your admin console.
### Links are searchable
Thanks to @nbianca links inserted in posts are now indexed for searching. See how it works with [this example search](https://meta.discourse.org/search?q=https%3A%2F%2Fgithub.com%2Fdiscourse%2Fdiscourse%2Fblob%2Fmaster%2Fdocs%2FINSTALL.md%20).
### Emoji 11.0 added
We’ve added support for the new Unicode 11.0 emojis.
> [@Emoji 11.0 recently added pack](https://meta.discourse.org/t/emoji-11-0-recently-added-pack/94870):
>
> Starting from today you can enjoy the “recently added” emojis of 11.0 ([Full list](http://www.unicode.org/emoji/charts-11.0/emoji-released.html)). Note that some sets are not yet available (mainly Apple) and will fallback to twitter set. I will make another update during October. smiling_face_with_three_hearts hot_face cold_face partying_face woozy_face pleading_face man_red_haired man_curly_haired man_white_haired man_bald woman_red_haired woman_curly_haired woman_white_haired woman_bald superhero man_superhero …
### Import script for Telligent
@gerhard wrote a new importer to migrate Telligent sites to Discourse. See [our list of importers](https://github.com/discourse/discourse/tree/master/script/import_scripts) to discover more.
### Add “Reset Bump Date” action
In the previous beta we added an [auto bump by category](https://meta.discourse.org/t/automatically-bumping-old-topics-on-a-category/92518) feature.
Now staff can choose to _reply_ to a topic without bumping it:
Staff can also change the topic’s last bump date to the last visible post in the topic.
More information available here:
> [@Reply without bumping topic](https://meta.discourse.org/t/reply-without-bumping-topic/94406):
>
> As a staff member you sometimes have the need to post a reply without bumping the topic to the top of the list. And now you can do exactly that. There’s a new “Toggle topic bump” in the composer’s reply selector. An anchor will appear at the top of the composer when bumping is disabled. Another new feature is the “Reset Bump Date” action in topic wrench menu. It changes the topic’s bump date to the date of the last visible post in the topic. That’s quite useful when the…
---
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [August 21, 2018, 7:55pm UTC](https://meta.discourse.org/t/discourse-2-1-0-beta5-release-notes/95331/2 "2018-08-21T19:55:40Z")
### Even more!
But wait, there’s more! We do our best to highlight new features and changes for you, but there’s always too many changes to detail. For a full list of new features, bug fixes, UX improvements, and more, be sure to review the Additional Features and Fixes listed below.
### Security Updates
This beta includes 1 security fix for issues reported by our community and [HackerOne]
([HackerOne](https://hackerone.com/discourse)).
- Prevent use of X-Forwarded-Host to perform XSS
# Plugin improvements
### [Data Explorer](https://meta.discourse.org/t/32566?silent=true) Plugin
- List all previous queries on [Data Explorer](https://meta.discourse.org/t/32566?silent=true) homepage
- Added clickable rows, default query sorting by id and clickable usernames
- Added User.find() & fixed scroll history bug
- Do not save username since we are already saving user\_id
- Added button to go back to query list after visiting a query
- FIX: Ensure that back button always redirects to index page
- FIX: Remove bad default query description and add placeholder instead
- Hide controls on query page
- FIX: Use predefined SCSS colors instead of hardcoded colors
- UX: Improve text when no query selected
### Checklist plugin
- fix spec
### Invite Tokens
- Add translation for accept\_invite
### Oauth2 Basic
- FIX: callback url on subfolder installs
### Chat Integration Plugin
- FEATURE: Improve channel error visibility in the admin panel, stop adding chat integration errors to logs
### Sitemap
- Raise 404 for incorrect route
### Staff Notes
- FIX: uses user type for reports
### WordPress Plugin
- Bump Tested up to version
- Hide pin-until date input unless pin-topic is selected
- Add hidden class to pin-until input
- Stype publish-info text
- Left align all inputs
- Bump version to 1.7.0
- Changes for WordPress coding standards
- Fix typo in CSS selector name
- Only add hidden class to new-topic div if ‘link’ is explicity selected
- Bump version to 1.7.1
- Added avatar template size filter
- Avatar template size filter
- Update html-templates.php
- Escape HTML
- Move discourse\_topic\_link into a separate function
- Bump version to 1.7.2
- Remove unnecessary unary operator
- Check for error before returning the force-publish message
- Bump version to 1.7.3
### Spoiler Alert
- Make it compatible with stable branch
### Maths Plugin
- SECURITY: do not allow tags in math wrapper
### Discourse Voting
- FIX: only count votes when we have an array of votes
- FIX: release/reclaim votes on moving topics to different category
### Discourse Assign
- Slight margin reduction
- FIX: properly unassign topics if there are no **more** flags to handle
### Discourse Translator
- Fix incorrect variable scope
### Prometheus
- Fix typo
### Push Notification
- Fix the link to discourse. The topic url/id seems to have changed
### Styleguide
- Adding type scale, more colors, prettier
# Additional Features and Fixes
> **Click to expand**
>
> ### New Features
>
> - Improve API error reporting for invalid records
> - Automatically correct extension for bad uploads
> - More context for error reporting on jobs fails
> - Use `display: browser` in webmanifest for iOS devices
> - Silenced users should not be allowed to edit posts
> - Do encodeURI on share links
> - Group error message regarding image optimization failures
> - Group warnings about IP level rate limiting
> - Ability for plugins to whitelist custom fields for flags
> - Backend support for user-selectable components
> - Include excerpt in HTML view for pinned topics
>
> ### Bug Fixes
>
> - Doesn’t translate group permission keys
> - Disable\_2fa fix method selection
> - Do not hide YouTube embeds inside details tag
> - If user is logged off return 404 instead of 500
> - Handle concurrently creating post reply keys
> - User profiles didn’t work when API keys exist
> - Do not show an empty modal when an IP address is allowed or blocked. (#6265)
> - Subfolder support for S3 CDN
> - SpamRulesEnforcer should use default locale
> - HTML lang attribute expects hyphen instead of underscore
> - Load more on groups page does not account for params.
> - Search does not retrigger when context has changed. Take 2.
> - Incorrect title on new user narrative cert.
> - Make Discobot certificate route require login.
> - If we have not target available do not redirect
> - Avoid lograge error when controller doesn’t respond to `current_user`.
> - User can’t save gravatar as profile picture after refresh.
> - Always test and coerce to image on upload
> - Smiling face with three hearts emoji typo (#6286)
> - Allow silenced users to like / bookmark, just not flag.
> - Quality/bugfix dashboard/reports pass (#6283)
> - `FileHelper#download` should return nil if max size is exceeded.
> - `Guardian#post_can_act?` shouldn’t raise an error if user of post has been deleted.
> - Converting PNG to JPEG does not set the correct extension.
> - Raise an exception when 'downsize’git st fails
> - Don’t trigger ‘flag\_reviewed’ when no flags were reviewed
> - Simplify so we ban all auth paths
> - Validation of min\_posts and max\_posts didn’t work
> - Automatically correct bad avatars on access
> - Z-index fix for tag input on mobile
> - Don’t throw exception if welcome topic cannot be found
> - Refreshing auto groups when min\_username\_length is long
> - Add gif to list of allowed decoders
> - Update application\_controller\_spec.rb.
> - Going from /categories to /latest on mobile might break infinite scrolling
> - Validation of topic params broke discourse-assign
> - Silenced users shouldn’t be able to act on posts
> - Bulk deleting topics should ignore already deleted topics
> - Bulk updating category failed when topic title was too short
> - Uses touchstart/mousedown for selected tags (#6268)
> - Store the topic links using the cooked upload url
> - Add a basic validator for topic params
> - Use BasicUserSerializer for user\_badge.granted\_by (#6266)
> - Missing extensions for non-image uploads due to [FIX: Upload's content is the only source of truth for the file type. · tgxworld/discourse@2b57239 · GitHub](https://github.com/tgxworld/discourse/commit/2b5723938920647c45f7fc526e1edd19e8fad09e).
> - Importers failed to import avatars
> - Parsing non-existent feed should not fail
> - Allow selecting site’s default theme from preference
> - Ember click event not reliably working on fx (#6256)
> - User-deleted posts with deferred flags can be destroyed
> - Permalink redirects with subfolder
> - Simplifies mini tag chooser events handling (#6252)
> - Prevents focus of input on mobile (#6251)
> - Checks on parent visibility instead of filter itself (#6250)
> - Check permalinks for deleted topics
> - Ensure URLs include subfolder in admin emails UI
> - Subfolder redirects to wrong URL if the subfolder appears in the slug
> - Search does not retrigger when context has changed.
> - Don’t require device capabilities when calculating login methods
> - Include parameters in function call
> - Wrong order for `S3Helper#copy_file`.
> - Support Arrays with Marshal dump in distributed cache
> - Create tmp if it doesn’t exist when creating tmp/pids
> - Subfolder digest emails have incorrect URLs
>
> ### UX Changes
>
> - Allow admin to copy IP address details of a user. (#6270)
> - Stop putting usernames in edit reason when changing post owner
> - Show static page title. (#6273)
> - Improving tag topic list navigation consistency
> - Replace Google search with Discourse search on not found page
> - Replace Google search with Discourse search on not found page.
> - Topic-timer modal style fixes
> - Show anchor icon instead of text when topic bump is disabled
> - Improve category filtering and include subcategories
> - Prevent text from wrapping below notification icons
> - Admin permalink form can fit on one line
>
> ### Performance
>
> - Memoize `EmailReceiver#sent_to_mailinglist_mirror?`.
> - Restrict number of skipped email log for `Jobs::UserEmail`.
> - Memoize `SkippedEmailLog.reason_types`.
> - Only log the first skipped email when user exceeds daily limit.