Demo Overview: 2018-03-28

Unknown
Unknown
in Dev & Ops

Here's an overview of what R&D is planning for the next demo.

Hot

  1. Groups
    1. Search UI
  2. Editor
    1. Server Render Editor Blocks - View this issue on GitHub
    2. Hook up Embed UI to API and editor
    3. Dynamic Icon for Paragraph (Pilcro) menu

Fresh

  1. Make Rich Editor keyboard events more consistent
  2. Accessibility
    1. Vanilla: Improve headings/semantic HTML
    2. Rich Editor: Accessible toolbars
    3. Rich Editor: Emoji picker accessibility improvements
    4. Rich Editor: Check file upload permission client side
  3. GDN_Log table needs pruning
  4. Enums on items are not documented in API docs
  5. Add persist and setCookie option to AuthenticateApiController::post()
  6. Authenticator
    1. Update Authenticator class to match the new spec
    2. Add the "AutoConnect" property on SSOAuthenticators
    3. Add the "active" property on authenticators
  7. Create AuthenticatorsApiController Phase 1
  8. Update VanillaConnect to use state parameter
  9. Update VanillaConnect cookie nonce so that it can only be used from a specific browser
  10. Update UserModel::expandUsers to be extensible
  11. Add an archived parameter to /api/v2/categories
  12. Pagination with rel=“next” and rel=“prev”
  13. Remove ability to mute a category

Fixes

  1. @mentions in editor
  2. Docs link injection
  3. When marking a post as 'resolved' the post is also marked (inadvertently) as 'edited'
  4. Creating an event in a group without joining it
  5. Improve UX of joining a group when user has no permissions or is a member already.
  6. Hide image cropper on Media Query
  7. Users can comment on a private group discussion without joining it
  8. Creating a discussion in a group without joining it
  9. Creating an event in a group without joining it
  10. Groups CSRF on event participation
  11. User personal info disclosure through dashboard/activity manipulation
  12. Extremely bad query in Leaderboard addon when excluding moderators
  13. Trusted providers should not override AutoConnect in SSOModel
  14. CSRF on notifications alert
  15. Persistent XSS via Content-Type in Comment / Discussion / PM
  16. Liked Plugin: allows reflected XSS on /discussion/comment
  17. Analytics returning erroneous set-cookie calls
  18. Categories DisplayAs "Default" value
  19. Addons Directory uploads fail due to incorrect path parsing
  20. Remove group notification settings

Hot: new and exiting, Fresh: new and less-exciting, Fixes: bug-fix and security patches

Comments

Categories