# Several settings not matching docs and UI bugs

**URL:** https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970
**Category:** Support
**Created:** [October 26, 2022, 3:06pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970 "2022-10-26T15:06:33Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![ReenigneArcher](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/reenignearcher/32/278266_2.png) [@ReenigneArcher](https://meta.discourse.org/u/ReenigneArcher)
#### Post date: [October 26, 2022, 3:06pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/1 "2022-10-26T15:06:33Z")

</div>

I am just getting started with Discourse, so perhaps I am missing something obvious although I don’t think so. I am using the hosted instance for open source projects, so don’t know if I have limited options or what is going on.

**Missing settings**

- Voting not available when editing a category: [Discourse Topic Voting - #269](https://meta.discourse.org/t/discourse-voting/40121/269)  
(Not available for my hosting plan)

- Discord webhook option not available (all other discord options appear) as described in this post: [Set up Discord notifications with the discourse-chat-integration plugin](https://meta.discourse.org/t/set-up-discord-notifications-with-the-discourse-chat-integration-plugin/66600)  

- Missing CSP options in UI: [Mitigate XSS Attacks with Content Security Policy - #42 by ReenigneArcher](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243/42)  
(Not available for my hosting plan)

**UI Bugs**

- Plugins menu does not appear except in Chrome Incognito mode. Firefox (including incognito mode) does not appear, like so.  

- Discord chat integration “Discord” button has no action, and have odd scrollbar below. No action taken or errors in developer mode when clicking button.  

- When creating a category, the “Add required tag group” button fails “until after the category has been saved”

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [October 26, 2022, 3:10pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/2 "2022-10-26T15:10:48Z")

</div>

> [@ReenigneArcher](#):
>
> Plugins menu does not appear except in Chrome Incognito mode. Firefox (including incognito mode) does not appear, like so.

Remove your adblock 🤣

> [@ReenigneArcher](#):
>
> Discord webhook option not available (all other discord options appear) as described in this post: [Set up Discord notifications with the discourse-chat-integration plugin](https://meta.discourse.org/t/set-up-discord-notifications-with-the-discourse-chat-integration-plugin/66600)

The webhooks thing is on the Discord UI, not on Discourse. Maybe they changed how it works?

> [@ReenigneArcher](#):
>
> Missing CSP options in UI: [Mitigate XSS Attacks with Content Security Policy - #42 by ReenigneArcher](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243/42)

Those settings are hidden in some of our hosting tiers.

---

<div class="post-metadata">

### Author: ![ReenigneArcher](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/reenignearcher/32/278266_2.png) [@ReenigneArcher](https://meta.discourse.org/u/ReenigneArcher)
#### Post date: [October 26, 2022, 3:16pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/3 "2022-10-26T15:16:02Z")

</div>

> Remove your adblock

Appears that helped with the plugins menu. Thanks!

> The webhooks thing is on the Discord UI, not on Discourse. Maybe they changed how it works?

I know how to obtain the webhook from Discord (it hasn’t changed)… but I need to add the webhook address somewhere in Discourse so it can send to Discord.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [October 26, 2022, 3:16pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/4 "2022-10-26T15:16:38Z")

</div>

> [@ReenigneArcher](#):
>
> Missing CSP options in UI: [Mitigate XSS Attacks with Content Security Policy - #42 by ReenigneArcher](https://meta.discourse.org/t/mitigate-xss-attacks-with-content-security-policy/104243/42)

Those settings are hidden in some of our hosting tiers.

---

<div class="post-metadata">

### Author: ![ReenigneArcher](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/reenignearcher/32/278266_2.png) [@ReenigneArcher](https://meta.discourse.org/u/ReenigneArcher)
#### Post date: [October 26, 2022, 3:30pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/5 "2022-10-26T15:30:05Z")

</div>

That’s disappointing. I’d like to add a WidgetBot [crate](https://docs.widgetbot.io/embed/crate/) (discord integration) to the page… it’s a much better solution than [(Deprecated) Display a "Discord Widget" in a dropdown button](https://meta.discourse.org/t/display-a-discord-widget-in-a-dropdown-button/73719)

```html
<script src="https://cdn.jsdelivr.net/npm/@widgetbot/crate@3" async defer>
  new Crate({
    server: '299881420891881473',
    channel: '355719584830980096',
  })
</script>

```

Pretty simple bit of code. Adding their source javascript manually doesn’t work.

I’m guessing there’s no alternative way to enable those options?

Perhaps there could be a request process to see if the source is safe and it could be added to hosted instances? Or just allow it since the javascript runs on the client and not the host anyway?

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [October 26, 2022, 3:32pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/6 "2022-10-26T15:32:57Z")

</div>

The correct way forward is creating a #Customization > Theme component that does what you want there. A component like that can ship the third-party JS as a first-party asset, which is more secure and will be CSP compatible.

One recent example I’ve done is [GitHub - discourse/discourse-orgchart · GitHub](https://github.com/discourse/discourse-orgchart) which ships 3 different JS libraries under it’s assets, and works just fine under CSP.

---

<div class="post-metadata">

### Author: ![ReenigneArcher](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/reenignearcher/32/278266_2.png) [@ReenigneArcher](https://meta.discourse.org/u/ReenigneArcher)
#### Post date: [October 26, 2022, 3:59pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/7 "2022-10-26T15:59:06Z")

</div>

Okay, that points me in the right direction. I was confused about extending it via the `settings.yml` but it’s starting to make sense. This seems like a relevant example: [discourse-mermaid-theme-component/settings.yml at fa43854e66becf43626063e33dde29f636933d1f · discourse/discourse-mermaid-theme-component · GitHub](https://github.com/discourse/discourse-mermaid-theme-component/blob/fa43854e66becf43626063e33dde29f636933d1f/settings.yml#L4)

BTW, I appreciate your responses!

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [October 26, 2022, 4:02pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/8 "2022-10-26T16:02:40Z")

</div>

> [@ReenigneArcher](#):
>
> This seems like a relevant example: [discourse-mermaid-theme-component/settings.yml at fa43854e66becf43626063e33dde29f636933d1f · discourse/discourse-mermaid-theme-component · GitHub](https://github.com/discourse/discourse-mermaid-theme-component/blob/fa43854e66becf43626063e33dde29f636933d1f/settings.yml#L4)

If you want, an super easy way via the UI is just pasting the contents of [https://cdn.jsdelivr.net/npm/@widgetbot/crate@3](https://cdn.jsdelivr.net/npm/@widgetbot/crate@3) in a script tag like:

```xml
<script>
// paste all of https://cdn.jsdelivr.net/npm/@widgetbot/crate@3" contents here
</script>
<script>
  new Crate({
    server: '299881420891881473',
    channel: '355719584830980096',
  })
</script>

```

---

<div class="post-metadata">

### Author: ![ReenigneArcher](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/reenignearcher/32/278266_2.png) [@ReenigneArcher](https://meta.discourse.org/u/ReenigneArcher)
#### Post date: [October 26, 2022, 4:21pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/9 "2022-10-26T16:21:41Z")

</div>

> [@Falco](#):
>
> If you want, an super easy way via the UI is just pasting the contents of [https://cdn.jsdelivr.net/npm/@widgetbot/crate@3](https://cdn.jsdelivr.net/npm/@widgetbot/crate@3) in a script tag like:

Unfortunately, that did not work.

Also, not working by extending it via a theme. 😕

 ![image](https://global.discourse-cdn.com/meta/original/4X/9/b/1/9b1cd2316d79f233897cf785bd843f86d4af4b10.png)

---

<div class="post-metadata">

### Author: ![ReenigneArcher](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/reenignearcher/32/278266_2.png) [@ReenigneArcher](https://meta.discourse.org/u/ReenigneArcher)
#### Post date: [October 26, 2022, 6:14pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/10 "2022-10-26T18:14:56Z")

</div>

So, now that my plugins menu is working… it seems that the **Discourse Voting** is not included. Is this intentional? I imagined that official plugins would all be included by default.

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [October 26, 2022, 6:23pm UTC](https://meta.discourse.org/t/several-settings-not-matching-docs-and-ui-bugs/242970/11 "2022-10-26T18:23:31Z")

</div>

Not all official plugins are included in all hosting plans

> **[Plugin directory](https://www.discourse.org/plugins)**
>
> Extend the functionality of your Discourse community with our official plugins.