fix discussion xss
add set read feature
merge