UX CHANGES
- Join dates in tooltips using line breaks.
- Prevent long names from overflowing post
- Primary & danger buttons should lighten on hover in dark themes
- Hide associate accounts if second factor is enabled
- Remove auth token log from user page
- Primary button didn’t have hover effect anymore
- Add padding between fa-chevron-up/down and heading for groups page
- Avatar on collapsed user profile was the wrong size
- Show Rollback and Backup buttons on same line
- Improve email testing admin tool. (#6308)
- Reserved_usernames should be a compact list (#6330)
- More compact polls on mobile
- Show only the expand icon in lightboxes on mobile.
- Improve copying from IP lookup component.
- Do not show the groups directory if disabled.
- Styles for user-cards should the same with badges on / off
- Super short tags shouldn’t display on same line as title
- Youtube embed title overlaps with select-kit
- Show full name on /latest page
- Keyboard shortcuts will automatically select hovered post
- Blue “Resend Activation Email” button in wizzard
- Don’t show the whisper toggle when replying to a whisper
- Wizard resends activation email when user exists
- Allow admin to copy IP address details of a user. (#6270)
- Stop putting usernames in edit reason when changing post owner
- Show static page title. (#6273)
- Improving tag topic list navigation consistency
- Replace Google search with Discourse search on not found page
- Replace Google search with Discourse search on not found page.
- Topic-timer modal style fixes
- Show anchor icon instead of text when topic bump is disabled
- Improve category filtering and include subcategories
- Prevent text from wrapping below notification icons
- Admin permalink form can fit on one line
- Improves edit reason contrast in dark themes
- Better rejection message when reply via email is too short
- Include a flag reason in the post-deleted-by-staff-because-of-flags message
- Add ‘when’ to autobump messages
- Allow emojis to be displayed in nav-item.
- Changes in top categories of hamburger menu (#6200)
- Gives wizard language selector more room to expand
- More categories link alignment
- Display only top categories in hamburger menu (#6146)
- Add a route /rules as an alias for /faq and /guidelines
- Clear topic timer text when manually closing/opening (#6123)
- Clear topic timer text when manually closing/opening
- Open the change avatar modal when clicking the profile picture
- Preview multiple color schemes in wizard (#6151)
- Auto fix order when reordering categories (#6149)
- Drop ‘fix order’ and auto re-order subcategory
- Don’t show the avatar section when overriden by SSO
- Skip the modal and refresh the app when selecting an avatar
- Use future date input instead of date picker on feature topic modal (#6096)
- Use the pointer cursor when hovering over a selectable avatar
- Reload the page when changing avatar
- Adjust positioning of auto complete vertical
- Clicking admin menu does not hide select posts box.
- Don’t repeat category name in topnav
- Make sure autocomplete does not render off screen
- Focus on new topic link that appears on the page via keyboard. (#6081)
- Timeline lookup on mega topics should use date of current post.
- Show custom footer on user activity and preferences pages (#6080)
- Category description display issue
- Adds flexbox to topic user name fields on mobile
- Keyboard shortcuts (j/k) should work with /categories
- Don’t display an empty participants section.
- Don’t display participants count if it is zero.
- Refactor topic metadata’s many floats into flexbox (#6018)
- Rate limiter message will say to wait “a few seconds” instead of 0 to 3 seconds
- Don’t add light box for SVG images.
- Show quote button at end of selection on Opera
- Reworks dashboard problems section to be in line with new style
- No need to warn about username changes anymore
- Makes sure close modal icon is aligned with title
- Experimental ranges for local dates
SECURITY CHANGES
- Correct edge case when SSO provides unvalidated emails
- Prevent users from modifying custom fields
- Prevents XSS in local-dates
- Prevent use of X-Forwarded-Host to perform XSS
- Force IM decoder based on file extension - part 3
- Force IM decoder based on file extension - part 2
- Force IM decoder based on file extension
- Consider
0.0.0.0
a private IP - Extra CORS headers should be set on correct host
- Do not allow authentication with disabled plugin-supplied a… (#6071)
- Category badges should HTML escape names
- Prevents XSS when showing tooltip
- Update sprockets for CVE-2018-3760
PERFORMANCE
- Add fast path to find uploads before resorting to
LIKE
query. - Memoize
EmailReceiver#sent_to_mailinglist_mirror?
. - Restrict number of skipped email log for
Jobs::UserEmail
. - Memoize
SkippedEmailLog.reason_types
. - Only log the first skipped email when user exceeds daily limit.
- Add missing index on
EmailLog#bounced
. - Split loading of posts to speed up user renames
- Move
EmailLog#reply_key
into newpost_reply_keys
table. - Split skipped email logs into a seperate table.
- Tune indexes to speed up lookup for bounced email.
- Store
EmailLog#reply_key
asuuid
data type. - Store
EmailLog#bounce_key
asuuid
data type. (#6093) - Store
EmailLog#bounce_key
asuuid
data type. - Add missing index on
user_id
foruser_second_factors
table. - Make mega topics work without a stream.
- Do not carry post ids in memory when rebaking all posts
- Reduce querying when creating notifications
- Drop support for gaps in mega topics.
- We have no use for topic percent rank
- Do not calculate gaps for
TopicViewPostsSerializer
. - Scanning the
id
for this is signficantly slower in production - Update
TopicView#participant_count
to useTopic#posts_count
. - Don’t pluck all the columns just to retrieve a single value.
- Send down gaps as the relevant posts load instead of front loading.
- Don’t include entire post stream when we’re loading more posts.
- Help postgres make use of index in
Post.summary
. - Memoize
TopicView#gaps
results. - Add index_topic_id_percent_rank_on_posts.
- Mega_topics get no post counts per user
- Don’t display days ago on timeline for megatopics.
- Stop counting participants on very large topics
- Faster Screened IP Address roll up
- Release results in a couple of cases
- Prefer
exists?
instead of loading AR object.