{
  "canonical_id": "discourse--703d073816",
  "system_id": "discourse",
  "display_name": "Discourse",
  "category": "cms",
  "advisory_mode": "core",
  "title": "3.5.0.beta2: Review Queue, Welcome Banner, Admin Interface, and more",
  "summary": "<h2><a name=\"p-1736834-new-features-in-350beta2-1\" class=\"anchor\" href=\"https://meta.discourse.org#p-1736834-new-features-in-350beta2-1\" aria-label=\"Heading link\"></a>New features in 3.5.0.beta2</h2>\n<h3><a name=\"p-1736834-review-queue-2\" class=\"anchor\" href=\"https://meta.discourse.org#p-1736834-review-queue-2\" aria-label=\"Heading link\"></a>Review queue</h3>\n<p>We have begun making a series of improvements to the review queue, where moderators can review and handle flagged content.</p>\n<ul>\n<li>A popup is displayed after completing a review action, as a success indication and to prevent accidental multi-clicks.</li>\n</ul>\n<p></p><div class=\"lightbox-wrapper\"><a class=\"lightbox\" href=\"https://d11a6trkgmumsb.cloudfront.net/original/4X/6/e/c/6ec6e9210eeba60fbddb34471d6fd12eef058133.png\" data-download-href=\"/uploads/short-url/fNYGwv5nuC4Opj9Q6AAWMmeVeQb.png?dl=1\" title=\"The image shows a notification indicating that a post has been hidden and the user has been notified, with a &quot;NEW&quot; icon and a confirmation checkmark on the left. (Captioned by AI)\"><img src=\"https://d11a6trkgmumsb.cloudfront.net/original/4X/6/e/c/6ec6e9210eeba60fbddb34471d6fd12eef058133.png\" alt=\"The image shows a notification indicating that a post has been hidden and the user has been notified, with a &quot;NEW&quot; icon and a confirmation checkmark on the left. (Captioned by AI)\" data-base62-sha1=\"fNYGwv5nuC4Opj9Q6AAWMmeVeQb\" width=\"690\" height=\"303\"></a></div><p></p>\n<ul>\n<li>If a post is flagged due to matching watched words, the responsible words are listed now so it\u2019s easier to immediately know the reason for the flag.</li>\n</ul>\n<h3><a name=\"p-1736834-welcome-banner-3\" class=\"anchor\" href=\"https://meta.discourse.org#p-1736834-welcome-banner-3\" aria-label=\"Heading link\"></a>Welcome banner</h3>\n<p>We have added a new welcome banner feature, to welcome members and allow them to search site content. To turn it on, select the <code>Enable welcome banner</code> site setting.</p>\n<p></p><div class=\"lightbox-wrapper\"><a class=\"lightbox\" href=\"https://d11a6trkgmumsb.cloudfront.net/original/4X/0/8/a/08acb58cc73bb4e0d3e34757112f22e9fd916ff2.jpeg\" data-download-href=\"/uploads/short-url/1eJQxGJNU1xNQjF4A7ivENy0KYO.jpeg?dl=1\" title=\"This image shows a screenshot of a Discourse homepage with a welcome message for a user named Lauri. (Captioned by AI)\"><img src=\"https://d11a6trkgmumsb.cloudfront.net/original/4X/0/8/a/08acb58cc73bb4e0d3e34757112f22e9fd916ff2.jpeg\" alt=\"This image shows a screenshot of a Discourse homepage with a welcome message for a user named Lauri. (Captioned by AI)\" data-base62-sha1=\"1eJQxGJNU1xNQjF4A7ivENy0KYO\" width=\"690\" height=\"306\"></a></div><p></p>\n<h3><a name=\"p-1736834-admin-interface-4\" class=\"anchor\" href=\"https://meta.discourse.org#p-1736834-admin-interface-4\" aria-label=\"Heading link\"></a>Admin interface</h3>\n<p>We continue to make improvements to the admin interface at a rapid pace. Three improvements to highlight:</p>\n<ul>\n<li>Uploading and managing your site\u2019s logos has become easier with the newly redesigned and reorganized branding page. The logos we think every site should have are highlighted, while optional logos have been tucked away.</li>\n</ul>\n<p></p><div class=\"lightbox-wrapper\"><a class=\"lightbox\" href=\"https://d11a6trkgmumsb.cloudfront.net/original/4X/4/4/9/4494bbcc51aff601a26cd9c11f52d253b237cda9.jpeg\" data-download-href=\"/uploads/short-url/9MH7WUKhxPZHBNzyIjVmNz3mxAd.jpeg?dl=1\" title=\"The image shows a website's appearance settings, focusing on the &quot;Site logo&quot; option in the navigation menu under &quot;Appearance,&quot; with a highlighted blue arrow leading to this section. (Captioned by AI)\"><img src=\"https://d11a6trkgmumsb.cloudfront.net/original/4X/4/4/9/4494bbcc51aff601a26cd9c11f52d253b237cda9.jpeg\" alt=\"The image shows a website's appearance settings, focusing on the &quot;Site logo&quot; option in the navigation menu under &quot;Appearance,&quot; with a highlighted blue arrow leading to this section. (Captioned by AI)\" data-base62-sha1=\"9MH7WUKhxPZHBNzyIjVmNz3mxAd\" width=\"690\" height=\"306\"></a></div><p></p>\n<ul>\n<li>\n<p>When editing your theme\u2019s color palettes (formerly known as color schemes) you can now specify color hex codes in addition to the usual color picker.</p>\n</li>\n<li>\n<p>If you like to get into your theme\u2019s code to edit HTML and CSS, you will enjoy the newly improved theme editing interface. We hid seldom used fields behind a toggle, added better descriptions, and always display descriptions at the top rather than behind tooltips.</p>\n</li>\n</ul>\n<h2><a name=\"p-1736834-security-updates-5\" class=\"anchor\" href=\"https://meta.discourse.org#p-1736834-security-updates-5\" aria-label=\"Heading link\"></a>Security Updates</h2>\n<p>This release includes fixes for these security issues reported by our community and <a href=\"https://hackerone.com/discourse\">HackerOne</a>.</p>\n<ul>\n<li><a href=\"https://github.com/discourse/discourse/security/advisories/GHSA-hfcx-qjw6-573r\" class=\"inline-onebox\">Race condition when adding users to a group DM \u00b7 Advisory \u00b7 discourse/discourse \u00b7 GitHub</a></li>\n<li><a href=\"https://github.com/discourse/discourse/security/advisories/GHSA-4p63-qw6g-4mv2\" class=\"inline-onebox\">Bypass user preference when adding users to chat groups \u00b7 Advisory \u00b7 discourse/discourse \u00b7 GitHub</a></li>\n</ul>\n            <p><small>2 posts - 2 participants</small></p>\n            <p><a href=\"https://meta.discourse.org/t/3-5-0-beta2-review-queue-welcome-banner-admin-interface-and-more/358151\">Read full topic</a></p>",
  "published_at": "Wed, 26 Mar 2025 02:46:32 +0000",
  "updated_at": "Wed, 26 Mar 2025 02:46:32 +0000",
  "severity": "unknown",
  "cvss_score": null,
  "exploit_status": "unknown",
  "source_confidence": "official",
  "official_source_url": "https://meta.discourse.org/t/3-5-0-beta2-review-queue-welcome-banner-admin-interface-and-more/358151",
  "secondary_source_urls": [],
  "aliases": [],
  "cve_ids": [],
  "ghsa_ids": [],
  "osv_ids": [],
  "affected_versions": [],
  "fixed_versions": [],
  "package_name": null,
  "render_markdown": false,
  "case_path": null,
  "secure_code_topics": [
    "authz-server-side-recheck",
    "xss-output-encoding",
    "plugin-extension-trust-policy",
    "file-upload-validation",
    "dependency-upgrade-policy"
  ],
  "status": "triage",
  "triage_reasons": [
    "missing affected/fixed version details"
  ],
  "verification_status": "triage-manual",
  "verification_mode": "synthetic",
  "last_verified_at": null,
  "last_run_id": null,
  "evidence_bundle": null,
  "historical_status": null,
  "latest_status": null,
  "browser_evidence": {
    "required": false,
    "present": false,
    "refs": []
  },
  "repro_profile_id": "xss-generic",
  "artifact_mode": "synthetic",
  "blocked_reason": null,
  "metadata": {
    "source_names": [
      "Discourse Release Notes RSS"
    ],
    "source_kinds": [
      "rss-feed"
    ],
    "candidate_count": 1
  }
}